Skip to content
ecdsa.com
AcceptableShort Weierstrass

GC512A

GC512A (id-tc26-gost-3410-12-512-paramSetA) is a 512-bit curve of GOST R 34.10-2012.

GC512A is a short Weierstrass curve y² = x³ + ax + b over a 512-bit prime field with a 512-bit prime-order subgroup and cofactor 1; its estimated security level is 256 bits. Status: secure, but regional or niche.

GOST R 34.10-2012 added 512-bit signature keys. paramSetA, published in RFC 7836 §5.1.1, is y² = x³ − 3x + b over the prime 2^512 − 569 and has prime order, for about 256 bits of security.

Signatures use the 512-bit Streebog hash; TLS lists the curve as group GC512A with signature scheme gostr34102012_512a (RFC 9189, RFC 9367).

Names in standards

StandardName
IANA TLS (RFC 9189)GC512A
TC 26id-tc26-gost-3410-12-512-paramSetA

Object identifiers

Domain parameters

512-bit prime field · about 256-bit security

Field prime p
0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdc7
Coefficient a
0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdc4
Coefficient b
0xe8c2505dedfc86ddc1bd0b2b6667f1da34b82574761cb0e879bd081cfd0b6265ee3cb090f30d27614cb4574010da90dd862ef9d4ebee4761503190785a71c760
Base point x
0x3
Base point y
0x7503cfe87a836ae3a61b8816e25450e6ce5e1c93acf1abc1778064fdcbefa921df1626be4fd036e93d75e6a50e3a41e98028fe5fc235f5b889a589cb5215f2a4
Order n of the base point
0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff27e69532f48d89116ff22b8d4e0560609b4b38abfad2b85dcacdb1411f10b275
Cofactor h
0x1

Used in

  • GOST R 34.10-2012 signatures
  • TLS 1.2 and 1.3 GOST cipher suites (RFC 9189, RFC 9367)
  • Russian government PKI

Identifiers in registries

TLS supported groups
GC512A 0x0026
TLS signature schemes
gostr34102012_512a 0x070D

Standards and references

All curves