Skip to content
ecdsa.com
DeprecatedShort Weierstrass

secp192k1

secp192k1 is a 192-bit SEC 2 Koblitz curve (y² = x³ + 3) with about 96 bits of security.

secp192k1 is a short Weierstrass curve y² = x³ + ax + b over a 192-bit prime field with a 192-bit prime-order subgroup and cofactor 1; its estimated security level is 96 bits. Status: deprecated, do not use for new keys.

The 'k' curves of SEC 2 have a = 0 and a small b — here y² = x³ + 3. Because a = 0 and p ≡ 1 (mod 3), the curve has an efficiently computable endomorphism that speeds up scalar multiplication (the GLV method). secp192k1 has a prime-order group of about 2^192 elements.

At about 96 bits of security it falls short of the 112-bit minimum of NIST SP 800-57, and RFC 8422 deprecated it for TLS (code point 18). It survives only in legacy systems.

Names in standards

StandardName
SEC 2secp192k1

Object identifiers

Domain parameters

192-bit prime field · about 96-bit security

Field prime p
0xfffffffffffffffffffffffffffffffffffffffeffffee37
Coefficient a
0x0
Coefficient b
0x3
Base point x
0xdb4ff10ec057e9ae26b07d0280b7f4341da5d1b1eae06c7d
Base point y
0x9b2f2f6d9c5628a7844163d015be86344082aa88d95e2f9d
Order n of the base point
0xfffffffffffffffffffffffe26f2fc170f69466a74defd8d
Cofactor h
0x1

Used in

  • Legacy TLS 1.2 (secp192k1)

Identifiers in registries

TLS supported groups
secp192k1 0x0012

Standards and references

All curves