For TLS-based EAP types, this optional parameter enables ephemeral EC keying by specifying the name of the elliptic curve to use. The default is to not enable ephemeral EC keying.

# Curves often have multiple aliases. Need OpenSSL name here.
# openssl ecparam -list_curves
EAPTLS_ECDH_Curve prime256v1