secp112r1 is a short Weierstrass curve y² = x³ + ax + b over a 112-bit prime field with a 112-bit prime-order subgroup and cofactor 1; its estimated security level is 56 bits. Status: broken.
secp112r1 was defined in SEC 2 version 1.0 (2000) for constrained devices, together with other small curves of 112 to 160 bits. Its prime-order group of about 2^112 elements offers only about 56 bits of security, and SEC 2 version 2.0 (2010) no longer lists it.
Bos, Kaihara, Kleinjung, Lenstra and Montgomery solved a discrete logarithm on exactly this curve in 2009, using a cluster of PlayStation 3 consoles. Any key on secp112r1 must be treated as broken.
Names in standards
| Standard | Name |
|---|
| SEC 2 v1.0 | secp112r1 |
Domain parameters
112-bit prime field · about 56-bit security
- Field prime p
- 0xdb7c2abf62e35e668076bead208b
- Coefficient a
- 0xdb7c2abf62e35e668076bead2088
- Coefficient b
- 0x659ef8ba043916eede8911702b22
- Base point x
- 0x9487239995a5ee76b55f9c2f098
- Base point y
- 0xa89ce5af8724c0a23e0e0ff77500
- Order n of the base point
- 0xdb7c2abf62e35e7628dfac6561c5
- Cofactor h
- 0x1
- Seed
- 0x00f50b028e4d696e676875615175290472783fb1
← All curves