Skip to content
ecdsa.com
AcceptableShort Weierstrass

brainpoolP384t1

brainpoolP384t1 is the counterpart of brainpoolP384r1 with a = −3, isomorphic to it and chosen for faster arithmetic.

brainpoolP384t1 is a short Weierstrass curve y² = x³ + ax + b over a 384-bit prime field with a 384-bit prime-order subgroup and cofactor 1; its estimated security level is 192 bits. Status: secure, but regional or niche.

Each Brainpool 'r1' curve has a 't1' counterpart obtained through an isomorphism over GF(p) — the parameter Z of RFC 5639 §3 maps (x, y) to (Z²x, Z³y) — that turns a into −3, which allows faster point doubling. The two curves have isomorphic groups of the same prime order and the same security level (about 192 bits). See brainpoolP384r1.

TLS, JOSE and COSE register only the r1 curves; the t1 forms appear as X.509 OIDs (RFC 5639 §4.1) and in libraries such as OpenSSL and Bouncy Castle.

Names in standards

StandardName
RFC 5639brainpoolP384t1

Object identifiers

Domain parameters

384-bit prime field · about 192-bit security

Field prime p
0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53
Coefficient a
0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec50
Coefficient b
0x7f519eada7bda81bd826dba647910f8c4b9346ed8ccdc64e4b1abd11756dce1d2074aa263b88805ced70355a33b471ee
Base point x
0x18de98b02db9a306f2afcd7235f72a819b80ab12ebd653172476fecd462aabffc4ff191b946a5f54d8d0aa2f418808cc
Base point y
0x25ab056962d30651a114afd2755ad336747f93475b7a1fca3b88f2b6a208ccfe469408584dc2b2912675bf5b9e582928
Order n of the base point
0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565
Cofactor h
0x1

Standards and references

All curves