Generate an ECDSA Key Pair

RynoPay uses ECDSA key pairs for authentication. You keep the private key on your server and register the public key with RynoPay.

We support ES256 (P-256).

Using OpenSSL

Generate a private key

openssl ecparam -genkey -name prime256v1 -noout -out private-key.pem

Keep your private key secret

Your private key must never leave your server. Store it in a secrets manager (AWS Secrets Manager, Azure Key Vault, HashiCorp Vault), HSM, or encrypted storage. Never commit it to source control.

Extract the public key

openssl ec -in private-key.pem -pubout -out public-key.pem

This is the key you will register with RynoPay.

Verify your keys

# View the public key (should show "-----BEGIN PUBLIC KEY-----")
cat public-key.pem

# Verify the curve (should show "ASN1 OID: prime256v1")
openssl ec -in private-key.pem -text -noout 2>&1 | head -1

What the public key looks like

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE...base64...
-----END PUBLIC KEY-----

Key storage summary

Key	Where to store	Who has access
Private key (private-key.pem)	Your server only (secrets manager, HSM, or encrypted storage)	Only your application
Public key (public-key.pem)	Registered with RynoPay via Partner Portal	RynoPay (for signature verification)