Skip to content
ecdsa.com
AcceptableShort Weierstrass

FRP256v1

FRP256v1 is a 256-bit prime curve published by the French government (ANSSI) in 2011.

FRP256v1 is a short Weierstrass curve y² = x³ + ax + b over a 256-bit prime field with a 256-bit prime-order subgroup and cofactor 1; its estimated security level is 128 bits. Status: secure, but regional or niche.

FRP256v1 is a short Weierstrass curve y² = x³ − 3x + b over a 256-bit prime, with prime order. ANSSI published it in 2011 in a notice in the Journal officiel, and its OID is 1.2.250.1.223.101.256.1.

The notice gives the parameters without a verifiable generation procedure. Bouncy Castle ships the curve (as FRP256v1), but TLS, JOSE, COSE and the Web PKI have not adopted it.

Names in standards

StandardName
ANSSIFRP256v1

Object identifiers

Domain parameters

256-bit prime field · about 128-bit security

Field prime p
0xf1fd178c0b3ad58f10126de8ce42435b3961adbcabc8ca6de8fcf353d86e9c03
Coefficient a
0xf1fd178c0b3ad58f10126de8ce42435b3961adbcabc8ca6de8fcf353d86e9c00
Coefficient b
0xee353fca5428a9300d4aba754a44c00fdfec0c9ae4b1a1803075ed967b7bb73f
Base point x
0xb6b3d4c356c139eb31183d4749d423958c27d2dcaf98b70164c97a2dd98f5cff
Base point y
0x6142e0f7c8b204911f9271f0f3ecef8c2701c307e8e4c9e183115a1554062cfb
Order n of the base point
0xf1fd178c0b3ad58f10126de8ce42435b53dc67e140d2bf941ffdd459c6d655e1
Cofactor h
0x1

Used in

  • French government applications

Standards and references

All curves