AWS Security ChangesHomeSearch

AWS cloudhsm documentation change

Service: cloudhsm · 2026-01-07 · Documentation low

File: cloudhsm/latest/userguide/cloudhsm_cli-key-generate-asymmetric-pair-ec.md

Summary

Added ed25519 to supported curves with instance restrictions

Security assessment

Documents new key generation capability for Ed25519 without security fixes

Diff

diff --git a/cloudhsm/latest/userguide/cloudhsm_cli-key-generate-asymmetric-pair-ec.md b/cloudhsm/latest/userguide/cloudhsm_cli-key-generate-asymmetric-pair-ec.md
index 7ae6011d1..721037b11 100644
--- a//cloudhsm/latest/userguide/cloudhsm_cli-key-generate-asymmetric-pair-ec.md
+++ b//cloudhsm/latest/userguide/cloudhsm_cli-key-generate-asymmetric-pair-ec.md
@@ -42 +42 @@ To run this command, you must be logged in as a CU.
-              Elliptic curve used to generate the key pair [possible values: prime256v1, secp256r1, secp224r1, secp384r1, secp256k1, secp521r1]
+              Elliptic curve used to generate the key pair [possible values: prime256v1, secp256r1, secp224r1, secp384r1, secp256k1, secp521r1, ed25519]
@@ -416,0 +417,2 @@ Specifies the identifier for the elliptic curve.
+  * ed25519 (only supported on hsm2m.medium instances in non-FIPS mode)
+