Skip to content
ecdsa.com
DeprecatedShort Weierstrass

P-192

P-192 (secp192r1, prime192v1) is the smallest NIST prime curve; at about 96-bit security it is legacy-only.

P-192 is a short Weierstrass curve y² = x³ + ax + b over a 192-bit prime field with a 192-bit prime-order subgroup and cofactor 1; its estimated security level is 96 bits. Status: deprecated, do not use for new keys.

P-192 is the short Weierstrass curve y² = x³ − 3x + b over the prime 2^192 − 2^64 − 1. It was standardised in FIPS 186-2 (2000), appears in SEC 2 as secp192r1 and in ANSI X9.62 as prime192v1. As with the other NIST prime curves, b was derived from the published seed with SHA-1; where the seed itself came from is not documented.

A 192-bit group gives about 96 bits of security against Pollard's rho, below the 112-bit minimum of NIST SP 800-57. NIST SP 800-186 therefore classifies P-192 as legacy-use: it may still verify existing signatures but must not sign anything new. RFC 8422 deprecated it for TLS (code point 19).

Names in standards

StandardName
NIST FIPS 186-5 / SP 800-186P-192
SEC 2secp192r1
ANSI X9.62prime192v1

Object identifiers

Domain parameters

192-bit prime field · about 96-bit security

Field prime p
0xfffffffffffffffffffffffffffffffeffffffffffffffff
Coefficient a
0xfffffffffffffffffffffffffffffffefffffffffffffffc
Coefficient b
0x64210519e59c80e70fa7e9ab72243049feb8deecc146b9b1
Base point x
0x188da80eb03090f67cbf20eb43a18800f4ff0afd82ff1012
Base point y
0x7192b95ffc8da78631011ed6b24cdd573f977a11e794811
Order n of the base point
0xffffffffffffffffffffffff99def836146bc9b1b4d22831
Cofactor h
0x1
Seed
0x3045ae6fc8422f64ed579528d38120eae12196d5

Used in

  • Legacy X.509 certificates
  • Legacy TLS 1.2 (secp192r1)

Identifiers in registries

TLS supported groups
secp192r1 0x0013

Standards and references

All curves