Skip to content
ecdsa.com
AcceptableTwisted Edwards

numsp512t1

numsp512t1 is a 512-bit 'nothing up my sleeve' twisted Edwards curve proposed by Microsoft Research in 2014.

numsp512t1 is a twisted Edwards curve ax² + y² = 1 + dx²y² over a 512-bit prime field with a 510-bit prime-order subgroup and cofactor 4; its estimated security level is 256 bits. Status: secure, but regional or niche.

Over the same prime as numsp512d1, numsp512t1 is the twisted Edwards curve −x² + y² = 1 + dx²y² with the smallest d for which both the curve and its twist have order four times a prime (draft-black-numscurves, Appendix A). Its cofactor is 4 and its security about 256 bits.

Like the Weierstrass NUMS curves it was never standardised; Microsoft Research's MSR ECCLib implements it.

Names in standards

StandardName
draft-black-numscurves-02numsp512t1

Domain parameters

512-bit prime field · about 256-bit security

Field prime p
0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdc7
Coefficient a
0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdc6
Coefficient d
0x9baa8
Base point x
0x20
Base point y
0x7d67e841dc4c467b605091d80869212f9ceb124bf726973f9ff048779e1d614e62ae2ece5057b5dad96b7a897c1d72799261134638750f4f0cb91027543b1c5e
Order n of the base point
0x3fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa7e50809efdabbb9a624784f449545f0dcea5ff0cb800f894e78d1cb0b5f0189
Cofactor h
0x4

Used in

  • MSR ECCLib (Microsoft Research)

Standards and references

All curves