Skip to content
ecdsa.com
DeprecatedShort Weierstrass

brainpoolP160t1

brainpoolP160t1 is the counterpart of brainpoolP160r1 with a = −3, isomorphic to it and chosen for faster arithmetic.

brainpoolP160t1 is a short Weierstrass curve y² = x³ + ax + b over a 160-bit prime field with a 160-bit prime-order subgroup and cofactor 1; its estimated security level is 80 bits. Status: deprecated, do not use for new keys.

Each Brainpool 'r1' curve has a 't1' counterpart obtained through an isomorphism over GF(p) — the parameter Z of RFC 5639 §3 maps (x, y) to (Z²x, Z³y) — that turns a into −3, which allows faster point doubling. The two curves have isomorphic groups of the same prime order and the same security level (about 80 bits). See brainpoolP160r1.

TLS, JOSE and COSE register only the r1 curves; the t1 forms appear as X.509 OIDs (RFC 5639 §4.1) and in libraries such as OpenSSL and Bouncy Castle.

Names in standards

StandardName
RFC 5639brainpoolP160t1

Object identifiers

Domain parameters

160-bit prime field · about 80-bit security

Field prime p
0xe95e4a5f737059dc60dfc7ad95b3d8139515620f
Coefficient a
0xe95e4a5f737059dc60dfc7ad95b3d8139515620c
Coefficient b
0x7a556b6dae535b7b51ed2c4d7daa7a0b5c55f380
Base point x
0xb199b13b9b34efc1397e64baeb05acc265ff2378
Base point y
0xadd6718b7c7c1961f0991b842443772152c9e0ad
Order n of the base point
0xe95e4a5f737059dc60df5991d45029409e60fc09
Cofactor h
0x1

Standards and references

All curves