Skip to content
ecdsa.com
AcceptableShort Weierstrass

brainpoolP512t1

brainpoolP512t1 is the counterpart of brainpoolP512r1 with a = −3, isomorphic to it and chosen for faster arithmetic.

brainpoolP512t1 is a short Weierstrass curve y² = x³ + ax + b over a 512-bit prime field with a 512-bit prime-order subgroup and cofactor 1; its estimated security level is 256 bits. Status: secure, but regional or niche.

Each Brainpool 'r1' curve has a 't1' counterpart obtained through an isomorphism over GF(p) — the parameter Z of RFC 5639 §3 maps (x, y) to (Z²x, Z³y) — that turns a into −3, which allows faster point doubling. The two curves have isomorphic groups of the same prime order and the same security level (about 256 bits). See brainpoolP512r1.

TLS, JOSE and COSE register only the r1 curves; the t1 forms appear as X.509 OIDs (RFC 5639 §4.1) and in libraries such as OpenSSL and Bouncy Castle.

Names in standards

StandardName
RFC 5639brainpoolP512t1

Object identifiers

Domain parameters

512-bit prime field · about 256-bit security

Field prime p
0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3
Coefficient a
0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f0
Coefficient b
0x7cbbbcf9441cfab76e1890e46884eae321f70c0bcb4981527897504bec3e36a62bcdfa2304976540f6450085f2dae145c22553b465763689180ea2571867423e
Base point x
0x640ece5c12788717b9c1ba06cbc2a6feba85842458c56dde9db1758d39c0313d82ba51735cdb3ea499aa77a7d6943a64f7a3f25fe26f06b51baa2696fa9035da
Base point y
0x5b534bd595f5af0fa2c892376c84ace1bb4e3019b71634c01131159cae03cee9d9932184beef216bd71df2dadf86a627306ecff96dbb8bace198b61e00f8b332
Order n of the base point
0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069
Cofactor h
0x1

Standards and references

All curves