$ openssl ecparam -name prime256v1 -genkey -noout -out private.ec.key
 $ openssl ec -in private.pem -pubout -out public.pem