Skip to content
ecdsa.com
DeprecatedShort Weierstrass

brainpoolP160r1

brainpoolP160r1 is the 160-bit Brainpool curve of RFC 5639, with parameters derived verifiably from the digits of π and e.

brainpoolP160r1 is a short Weierstrass curve y² = x³ + ax + b over a 160-bit prime field with a 160-bit prime-order subgroup and cofactor 1; its estimated security level is 80 bits. Status: deprecated, do not use for new keys.

The Brainpool curves (RFC 5639) were generated in a verifiably pseudo-random way: the primes come from the digits of π and the curve coefficients from the digits of e, so anyone can recompute them (RFC 5639 Appendix A). brainpoolP160r1 is the 160-bit random curve; it has prime order (cofactor 1) and about 80 bits of security.

At about 80 bits of security it is too small for new keys (NIST SP 800-57 requires at least 112 bits). NIST SP 800-186 lists the Brainpool curves solely for interoperability.

Names in standards

StandardName
RFC 5639brainpoolP160r1

Object identifiers

Domain parameters

160-bit prime field · about 80-bit security

Field prime p
0xe95e4a5f737059dc60dfc7ad95b3d8139515620f
Coefficient a
0x340e7be2a280eb74e2be61bada745d97e8f7c300
Coefficient b
0x1e589a8595423412134faa2dbdec95c8d8675e58
Base point x
0xbed5af16ea3f6a4f62938c4631eb5af7bdbcdbc3
Base point y
0x1667cb477a1a8ec338f94741669c976316da6321
Order n of the base point
0xe95e4a5f737059dc60df5991d45029409e60fc09
Cofactor h
0x1

Standards and references

All curves