Skip to content
ecdsa.com
AcceptableShort Weierstrass

brainpoolP320t1

brainpoolP320t1 is the counterpart of brainpoolP320r1 with a = −3, isomorphic to it and chosen for faster arithmetic.

brainpoolP320t1 is a short Weierstrass curve y² = x³ + ax + b over a 320-bit prime field with a 320-bit prime-order subgroup and cofactor 1; its estimated security level is 160 bits. Status: secure, but regional or niche.

Each Brainpool 'r1' curve has a 't1' counterpart obtained through an isomorphism over GF(p) — the parameter Z of RFC 5639 §3 maps (x, y) to (Z²x, Z³y) — that turns a into −3, which allows faster point doubling. The two curves have isomorphic groups of the same prime order and the same security level (about 160 bits). See brainpoolP320r1.

TLS, JOSE and COSE register only the r1 curves; the t1 forms appear as X.509 OIDs (RFC 5639 §4.1) and in libraries such as OpenSSL and Bouncy Castle.

Names in standards

StandardName
RFC 5639brainpoolP320t1

Object identifiers

Domain parameters

320-bit prime field · about 160-bit security

Field prime p
0xd35e472036bc4fb7e13c785ed201e065f98fcfa6f6f40def4f92b9ec7893ec28fcd412b1f1b32e27
Coefficient a
0xd35e472036bc4fb7e13c785ed201e065f98fcfa6f6f40def4f92b9ec7893ec28fcd412b1f1b32e24
Coefficient b
0xa7f561e038eb1ed560b3d147db782013064c19f27ed27c6780aaf77fb8a547ceb5b4fef422340353
Base point x
0x925be9fb01afc6fb4d3e7d4990010f813408ab106c4f09cb7ee07868cc136fff3357f624a21bed52
Base point y
0x63ba3a7a27483ebf6671dbef7abb30ebee084e58a0b077ad42a5a0989d1ee71b1b9bc0455fb0d2c3
Order n of the base point
0xd35e472036bc4fb7e13c785ed201e065f98fcfa5b68f12a32d482ec7ee8658e98691555b44c59311
Cofactor h
0x1

Standards and references

All curves