Skip to content
ecdsa.com
AcceptableShort Weierstrass

brainpoolP384r1

brainpoolP384r1 is the 384-bit Brainpool curve of RFC 5639, with parameters derived verifiably from the digits of π and e.

brainpoolP384r1 is a short Weierstrass curve y² = x³ + ax + b over a 384-bit prime field with a 384-bit prime-order subgroup and cofactor 1; its estimated security level is 192 bits. Status: secure, but regional or niche.

The Brainpool curves (RFC 5639) were generated in a verifiably pseudo-random way: the primes come from the digits of π and the curve coefficients from the digits of e, so anyone can recompute them (RFC 5639 Appendix A). brainpoolP384r1 is the 384-bit random curve; it has prime order (cofactor 1) and about 192 bits of security.

TLS supports it through RFC 7027 (TLS 1.2) and RFC 8734 (TLS 1.3, group brainpoolP384r1tls13 and signature scheme ecdsa_brainpoolP384r1tls13_sha384); COSE registers ESB384. German government PKI and electronic identity documents use the Brainpool curves, and NIST SP 800-186 allows them for interoperability.

Names in standards

StandardName
RFC 5639brainpoolP384r1
IANA TLS 1.3brainpoolP384r1tls13

Object identifiers

Domain parameters

384-bit prime field · about 192-bit security

Field prime p
0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53
Coefficient a
0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826
Coefficient b
0x4a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11
Base point x
0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e
Base point y
0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315
Order n of the base point
0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565
Cofactor h
0x1

Used in

  • TLS 1.2 (RFC 7027)
  • TLS 1.3 (RFC 8734)
  • German eID and ePassports
  • X.509 (BSI TR-03116)

Identifiers in registries

TLS supported groups
brainpoolP384r1 0x001BbrainpoolP384r1tls13 0x0020
TLS signature schemes
ecdsa_brainpoolP384r1tls13_sha384 0x081B
COSE algorithms
ESB384 -267
COSE elliptic curves
brainpoolP384r1 258

Standards and references

All curves