Signatures

Convert a signature between DER and raw r‖s

POSThttps://ecdsa.com/api/v1/convert

Decodes a signature (DER or raw, auto-detected; hex/base64/base64url) and returns both encodings plus r, s and the high-S flag. normalize: "low-s" replaces a high-S s with n − s. Warnings list DER canonicality deviations (BER lengths, missing 0x00 pads, trailing bytes) and curve-ambiguity notes.

Chave de API: Opcional; a chave precisa do escopo api
Custo em cota com chave: 1 unidade por chamada
Limite de taxa: 60 requisições/min por IP

Requisição

Corpo JSON: ConvertRequest

Campo	Tipo	Obrigatório	Descrição
signature	string	sim	DER or raw r‖s signature in hex, base64 or base64url (auto-detected).
curve	string	não	Curve for sizing and the high-S check; inferred from the length when omitted. um dos valores "P-256", "secp256k1", "P-384" ou "P-521"
normalize	"low-s"	não	Replace a high-S s with its low-S equivalent n − s.

Campo

Tipo

Obrigatório

Descrição

signature

string

sim

DER or raw r‖s signature in hex, base64 or base64url (auto-detected).

curve

string

não

Curve for sizing and the high-S check; inferred from the length when omitted.

um dos valores "P-256", "secp256k1", "P-384" ou "P-521"

normalize

"low-s"

não

Replace a high-S s with its low-S equivalent n − s.

Respostas

200Both encodings of the signature.

Campo	Tipo	Obrigatório	Descrição
inputFormat	string	sim	um dos valores "der" ou "raw"
curve	string	sim	um dos valores "P-256", "secp256k1", "P-384" ou "P-521"
der	object	sim
der.hex	string	sim
der.base64	string	sim
raw	object	sim
raw.hex	string	sim
raw.base64	string	sim
raw.base64url	string	sim
r	string	sim	r as hex, zero-padded to the curve's component size.
s	string	sim	s as hex (after normalization when requested).
highS	boolean	sim	Whether the returned s is high-S.
warnings	string[]	sim

Cabeçalhos: X-Request-Id · X-RateLimit-Limit · X-RateLimit-Remaining · X-RateLimit-Reset · X-Quota-Limit · X-Quota-Remaining · X-Quota-Reset

Status	Significado	Códigos
400	Bad request. Input limits: a request body of at most 100 KB (a larger one is answered with 413) and arrays and objects nested at most 64 levels deep, JSON documents inside string fields included.	invalid_json missing_field invalid_input private_key_rejected
401	Unauthorized.	unauthorized
403	Forbidden.	forbidden_scope
404	Not found.	not_found
405	Method not allowed.	method_not_allowed
413	Payload too large.	payload_too_large
429	Too many requests.	rate_limited quota_exceeded
500	Internal server error.	internal_error
503	Service unavailable.	service_unavailable
504	Gateway timeout.	timeout

Toda resposta de erro traz o envelope JSON; a tabela de erros explica o que cada código significa e o que fazer.

Exemplo

A DER signature (P-256 size)

curl

curl -sS 'https://ecdsa.com/api/v1/convert' \
  -H 'content-type: application/json' \
  -d '{
  "signature": "3045022100df542bb71e0e3019086f1b1ba51f1aa0ec5e6afca05c3f5a7f4f02f5b7c39d24022030c59f1ac6d8c6893fb2a5ac8dfd9388d31ebd3382510dcfb7f28f9182eb1131"
}'

JavaScript (fetch)

const response = await fetch("https://ecdsa.com/api/v1/convert", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
    "signature": "3045022100df542bb71e0e3019086f1b1ba51f1aa0ec5e6afca05c3f5a7f4f02f5b7c39d24022030c59f1ac6d8c6893fb2a5ac8dfd9388d31ebd3382510dcfb7f28f9182eb1131"
  }),
});
console.log(response.status, await response.json());

Python (httpx)

import httpx

response = httpx.post(
    "https://ecdsa.com/api/v1/convert",
    json={
        "signature": "3045022100df542bb71e0e3019086f1b1ba51f1aa0ec5e6afca05c3f5a7f4f02f5b7c39d24022030c59f1ac6d8c6893fb2a5ac8dfd9388d31ebd3382510dcfb7f28f9182eb1131",
    },
    timeout=30.0,
)
print(response.status_code, response.json())

Resposta 200

{
  "inputFormat": "der",
  "curve": "P-256",
  "der": {
    "hex": "3045022100df542bb71e0e3019086f1b1ba51f1aa0ec5e6afca05c3f5a7f4f02f5b7c39d24022030c59f1ac6d8c6893fb2a5ac8dfd9388d31ebd3382510dcfb7f28f9182eb1131",
    "base64": "MEUCIQDfVCu3Hg4wGQhvGxulHxqg7F5q/KBcP1p/TwL1t8OdJAIgMMWfGsbYxok/sqWsjf2TiNMevTOCUQ3Pt/KPkYLrETE="
  },
  "raw": {
    "hex": "df542bb71e0e3019086f1b1ba51f1aa0ec5e6afca05c3f5a7f4f02f5b7c39d2430c59f1ac6d8c6893fb2a5ac8dfd9388d31ebd3382510dcfb7f28f9182eb1131",
    "base64": "31Qrtx4OMBkIbxsbpR8aoOxeavygXD9af08C9bfDnSQwxZ8axtjGiT+ypayN/ZOI0x69M4JRDc+38o+RgusRMQ==",
    "base64url": "31Qrtx4OMBkIbxsbpR8aoOxeavygXD9af08C9bfDnSQwxZ8axtjGiT-ypayN_ZOI0x69M4JRDc-38o-RgusRMQ"
  },
  "r": "df542bb71e0e3019086f1b1ba51f1aa0ec5e6afca05c3f5a7f4f02f5b7c39d24",
  "s": "30c59f1ac6d8c6893fb2a5ac8dfd9388d31ebd3382510dcfb7f28f9182eb1131",
  "highS": false,
  "warnings": [
    "The DER components fit P-256 and secp256k1; P-256 was assumed for the high-S check — pass \"curve\" to be explicit."
  ]
}

A resposta da API a este exemplo, gerada para esta página em 20 de outubro de 2026; tempos relativos e contagens de dias nela se referem a esse dia.

Códigos de erro

Código	Status	Significado
invalid_json	400	The body is not valid JSON or not a JSON object; or the input nests arrays and objects more than 64 levels deep (JSON documents inside string fields count too), or is too complex to inspect for private keys.
missing_field	400	A required field is absent or empty.
invalid_input	400	A field could not be parsed — the message explains exactly why.
private_key_rejected	400	The request contains private-key material (a PEM PRIVATE KEY block, an OpenSSH, SSH2 or PuTTY private key, or a JWK with "d"). Never send private keys anywhere.
unauthorized	401	The Authorization or X-API-Key header is malformed, the API key is not valid (wrong checksum, unknown, revoked or expired), or the operation needs a key.
forbidden_scope	403	The API key is valid but lacks a scope this operation requires; the message names it.
not_found	404	No operation exists at this path.
method_not_allowed	405	The path exists but does not accept this HTTP method; see the Allow header.
payload_too_large	413	The body exceeds 100 KB.
rate_limited	429	Too many requests — see Retry-After.
quota_exceeded	429	A daily or monthly quota of the API key's account is used up. X-Quota-Reset (and Retry-After) say when it starts over; retrying earlier cannot succeed.
internal_error	500	Unexpected server error.
service_unavailable	503	API keys cannot be verified right now (the key store is unreachable); retry shortly.
timeout	504	The operation did not finish within its time budget.

Schemas

Error

The error envelope of every non-2xx response.

Campo	Tipo	Obrigatório	Descrição
error	object	sim
error.code	string	sim	Machine-readable error code. Each response lists the codes it can carry; new codes may be added within v1, so treat an unknown code by its HTTP status.
error.message	string	sim	Human-readable explanation (English).
error.requestId	string	não	The X-Request-Id of this request — quote it when reporting a problem. Sent since v1.1.
error.detail	object	não	Structured context for the error, such as the offending field; omitted when there is none. quaisquer nomes de membros
error.docs	string	não	Where the error codes are explained. Sent since v1.1. formato uri

Todas as operações estão listadas na referência da API.