Skip to content
ecdsa.com
AcceptableTwisted Edwards

numsp384t1

numsp384t1 is a 384-bit 'nothing up my sleeve' twisted Edwards curve proposed by Microsoft Research in 2014.

numsp384t1 is a twisted Edwards curve ax² + y² = 1 + dx²y² over a 384-bit prime field with a 382-bit prime-order subgroup and cofactor 4; its estimated security level is 192 bits. Status: secure, but regional or niche.

Over the same prime as numsp384d1, numsp384t1 is the twisted Edwards curve −x² + y² = 1 + dx²y² with the smallest d for which both the curve and its twist have order four times a prime (draft-black-numscurves, Appendix A). Its cofactor is 4 and its security about 192 bits.

Like the Weierstrass NUMS curves it was never standardised; Microsoft Research's MSR ECCLib implements it.

Names in standards

StandardName
draft-black-numscurves-02numsp384t1

Domain parameters

384-bit prime field · about 192-bit security

Field prime p
0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec3
Coefficient a
0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec2
Coefficient d
0x5158a
Base point x
0x8
Base point y
0x749cdaba136ce9b65bd4471794aa619daa5c7b4c930bff8ebd798a8ae753c6d72f003860febabad534a4acf5fa7f5bee
Order n of the base point
0x3fffffffffffffffffffffffffffffffffffffffffffffffecd7d11ed5a259a25a13a0458e39f4e451d6d71f70426e25
Cofactor h
0x4

Used in

  • MSR ECCLib (Microsoft Research)

Standards and references

All curves