Skip to content
ecdsa.com
DeprecatedShort Weierstrass

brainpoolP192t1

brainpoolP192t1 is the counterpart of brainpoolP192r1 with a = −3, isomorphic to it and chosen for faster arithmetic.

brainpoolP192t1 is a short Weierstrass curve y² = x³ + ax + b over a 192-bit prime field with a 192-bit prime-order subgroup and cofactor 1; its estimated security level is 96 bits. Status: deprecated, do not use for new keys.

Each Brainpool 'r1' curve has a 't1' counterpart obtained through an isomorphism over GF(p) — the parameter Z of RFC 5639 §3 maps (x, y) to (Z²x, Z³y) — that turns a into −3, which allows faster point doubling. The two curves have isomorphic groups of the same prime order and the same security level (about 96 bits). See brainpoolP192r1.

TLS, JOSE and COSE register only the r1 curves; the t1 forms appear as X.509 OIDs (RFC 5639 §4.1) and in libraries such as OpenSSL and Bouncy Castle.

Names in standards

StandardName
RFC 5639brainpoolP192t1

Object identifiers

Domain parameters

192-bit prime field · about 96-bit security

Field prime p
0xc302f41d932a36cda7a3463093d18db78fce476de1a86297
Coefficient a
0xc302f41d932a36cda7a3463093d18db78fce476de1a86294
Coefficient b
0x13d56ffaec78681e68f9deb43b35bec2fb68542e27897b79
Base point x
0x3ae9e58c82f63c30282e1fe7bbf43fa72c446af6f4618129
Base point y
0x97e2c5667c2223a902ab5ca449d0084b7e5b3de7ccc01c9
Order n of the base point
0xc302f41d932a36cda7a3462f9e9e916b5be8f1029ac4acc1
Cofactor h
0x1

Standards and references

All curves