Skip to content
ecdsa.com
AcceptableTwisted Edwards

numsp256t1

numsp256t1 is a 256-bit 'nothing up my sleeve' twisted Edwards curve proposed by Microsoft Research in 2014.

numsp256t1 is a twisted Edwards curve ax² + y² = 1 + dx²y² over a 256-bit prime field with a 254-bit prime-order subgroup and cofactor 4; its estimated security level is 128 bits. Status: secure, but regional or niche.

Over the same prime as numsp256d1, numsp256t1 is the twisted Edwards curve −x² + y² = 1 + dx²y² with the smallest d for which both the curve and its twist have order four times a prime (draft-black-numscurves, Appendix A). Its cofactor is 4 and its security about 128 bits.

Like the Weierstrass NUMS curves it was never standardised; Microsoft Research's MSR ECCLib implements it.

Names in standards

StandardName
draft-black-numscurves-02numsp256t1

Domain parameters

256-bit prime field · about 128-bit security

Field prime p
0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff43
Coefficient a
0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff42
Coefficient d
0x3bee
Base point x
0xd
Base point y
0x7d0ab41e2a1276dba3d330b39fa046bfbe2a6d63824d303f707f6fb5331cadba
Order n of the base point
0x3fffffffffffffffffffffffffffffffbe6aa55ad0a6bc64e5b84e6f1122b4ad
Cofactor h
0x4

Used in

  • MSR ECCLib (Microsoft Research)

Standards and references

All curves