Reference

Elliptic curves

54 named curves, from P-256 and Curve25519 to Brainpool, GOST and pairing-friendly curves. Every parameter set is checked by arithmetic: the base point lies on the curve and has the stated order.

54 of 54 shown

Curve	Also known as	Field	Security	Form	Status
curve448	X448	448 bits	224 bits	Montgomery	Recommended
curve25519	X25519, curve25519-sha256	255 bits	128 bits	Montgomery	Recommended
edwards448	Ed448, Goldilocks	448 bits	224 bits	Edwards	Recommended
edwards25519	Ed25519	255 bits	128 bits	Twisted Edwards	Recommended
P-256	secp256r1, prime256v1, nistp256	256 bits	128 bits	Short Weierstrass	Recommended
P-384	secp384r1, nistp384	384 bits	192 bits	Short Weierstrass	Recommended
P-521	secp521r1, nistp521	521 bits	256 bits	Short Weierstrass	Recommended
BLS12-381	BLS12_381	381 bits	117 bits	Short Weierstrass	Acceptable
brainpoolP256r1	brainpoolP256r1tls13	256 bits	128 bits	Short Weierstrass	Acceptable
brainpoolP256t1		256 bits	128 bits	Short Weierstrass	Acceptable
brainpoolP320r1		320 bits	160 bits	Short Weierstrass	Acceptable
brainpoolP320t1		320 bits	160 bits	Short Weierstrass	Acceptable
brainpoolP384r1	brainpoolP384r1tls13	384 bits	192 bits	Short Weierstrass	Acceptable
brainpoolP384t1		384 bits	192 bits	Short Weierstrass	Acceptable
brainpoolP512r1	brainpoolP512r1tls13	512 bits	256 bits	Short Weierstrass	Acceptable
brainpoolP512t1		512 bits	256 bits	Short Weierstrass	Acceptable
FRP256v1		256 bits	128 bits	Short Weierstrass	Acceptable
GC256A	id-tc26-gost-3410-2012-256-paramSetA	256 bits	128 bits	Short Weierstrass	Acceptable
GC256B	id-tc26-gost-3410-2012-256-paramSetB, id-GostR3410-2001-CryptoPro-A-ParamSet, id-GostR3410-2001-CryptoPro-XchA-ParamSet	256 bits	128 bits	Short Weierstrass	Acceptable
GC256C	id-tc26-gost-3410-2012-256-paramSetC, id-GostR3410-2001-CryptoPro-B-ParamSet	256 bits	128 bits	Short Weierstrass	Acceptable
GC256D	id-tc26-gost-3410-2012-256-paramSetD, id-GostR3410-2001-CryptoPro-C-ParamSet, id-GostR3410-2001-CryptoPro-XchB-ParamSet	256 bits	128 bits	Short Weierstrass	Acceptable
GC512A	id-tc26-gost-3410-12-512-paramSetA	512 bits	256 bits	Short Weierstrass	Acceptable
GC512B	id-tc26-gost-3410-12-512-paramSetB	512 bits	256 bits	Short Weierstrass	Acceptable
GC512C	id-tc26-gost-3410-2012-512-paramSetC	512 bits	256 bits	Short Weierstrass	Acceptable
numsp256d1		256 bits	128 bits	Short Weierstrass	Acceptable
numsp256t1		256 bits	128 bits	Twisted Edwards	Acceptable
numsp384d1		384 bits	192 bits	Short Weierstrass	Acceptable
numsp384t1		384 bits	192 bits	Twisted Edwards	Acceptable
numsp512d1		512 bits	256 bits	Short Weierstrass	Acceptable
numsp512t1		512 bits	256 bits	Twisted Edwards	Acceptable
secp256k1		256 bits	128 bits	Short Weierstrass	Acceptable
SM2	curveSM2	256 bits	128 bits	Short Weierstrass	Acceptable
alt_bn128	BN254, BN256	254 bits	100 bits	Short Weierstrass	Legacy
brainpoolP224r1		224 bits	112 bits	Short Weierstrass	Legacy
brainpoolP224t1		224 bits	112 bits	Short Weierstrass	Legacy
P-224	secp224r1	224 bits	112 bits	Short Weierstrass	Legacy
secp224k1		224 bits	112 bits	Short Weierstrass	Legacy
brainpoolP160r1		160 bits	80 bits	Short Weierstrass	Deprecated
brainpoolP160t1		160 bits	80 bits	Short Weierstrass	Deprecated
brainpoolP192r1		192 bits	96 bits	Short Weierstrass	Deprecated
brainpoolP192t1		192 bits	96 bits	Short Weierstrass	Deprecated
P-192	secp192r1, prime192v1	192 bits	96 bits	Short Weierstrass	Deprecated
secp192k1		192 bits	96 bits	Short Weierstrass	Deprecated
sect163k1	K-163	163 bits	80 bits	Binary Weierstrass	Deprecated
sect163r2	B-163	163 bits	80 bits	Binary Weierstrass	Deprecated
sect233k1	K-233	233 bits	112 bits	Binary Weierstrass	Deprecated
sect233r1	B-233	233 bits	112 bits	Binary Weierstrass	Deprecated
sect283k1	K-283	283 bits	128 bits	Binary Weierstrass	Deprecated
sect283r1	B-283	283 bits	128 bits	Binary Weierstrass	Deprecated
sect409k1	K-409	409 bits	192 bits	Binary Weierstrass	Deprecated
sect409r1	B-409	409 bits	192 bits	Binary Weierstrass	Deprecated
sect571k1	K-571	571 bits	256 bits	Binary Weierstrass	Deprecated
sect571r1	B-571	571 bits	256 bits	Binary Weierstrass	Deprecated
secp112r1		112 bits	56 bits	Short Weierstrass	Broken