Skip to content
ecdsa.com
AcceptableShort Weierstrass

GC512C

GC512C (id-tc26-gost-3410-2012-512-paramSetC) is the 512-bit GOST curve with a twisted Edwards form.

GC512C is a short Weierstrass curve y² = x³ + ax + b over a 512-bit prime field with a 510-bit prime-order subgroup and cofactor 4; its estimated security level is 256 bits. Status: secure, but regional or niche.

Published with GC256A in RFC 7836 §5.2, paramSetC has cofactor 4 and is birationally equivalent to a twisted Edwards curve, so implementations can use complete addition formulas. It shares the prime 2^512 − 569 with GC512A.

TLS lists it as group GC512C with signature scheme gostr34102012_512c (RFC 9189, RFC 9367).

Names in standards

StandardName
IANA TLS (RFC 9189)GC512C
TC 26id-tc26-gost-3410-2012-512-paramSetC

Object identifiers

Domain parameters

512-bit prime field · about 256-bit security

Field prime p
0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdc7
Coefficient a
0xdc9203e514a721875485a529d2c722fb187bc8980eb866644de41c68e143064546e861c0e2c9edd92ade71f46fcf50ff2ad97f951fda9f2a2eb6546f39689bd3
Coefficient b
0xb4c4ee28cebc6c2c8ac12952cf37f16ac7efb6a9f69f4b57ffda2e4f0de5ade038cbc2fff719d2c18de0284b8bfef3b52b8cc7a5f5bf0a3c8d2319a5312557e1
Base point x
0xe2e31edfc23de7bdebe241ce593ef5de2295b7a9cbaef021d385f7074cea043aa27272a7ae602bf2a7b9033db9ed3610c6fb85487eae97aac5bc7928c1950148
Base point y
0xf5ce40d95b5eb899abbccff5911cb8577939804d6527378b8c108c3d2090ff9be18e2d33e3021ed2ef32d85822423b6304f726aa854bae07d0396e9a9addc40f
Order n of the base point
0x3fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffc98cdba46506ab004c33a9ff5147502cc8eda9e7a769a12694623cef47f023ed
Cofactor h
0x4

Used in

  • GOST R 34.10-2012 signatures
  • TLS 1.2 and 1.3 GOST cipher suites (RFC 9189, RFC 9367)
  • Russian government PKI

Identifiers in registries

TLS supported groups
GC512C 0x0028
TLS signature schemes
gostr34102012_512c 0x070F

Standards and references

All curves