Skip to content
ecdsa.com
DeprecatedBinary Weierstrass

sect163k1

sect163k1 (NIST K-163) is a Koblitz curve over the binary field GF(2^163); NIST has deprecated it.

sect163k1 is a binary Weierstrass curve y² + xy = x³ + ax² + b over the binary field GF(2^163) with a 163-bit prime-order subgroup and cofactor 2; its estimated security level is 80 bits. Status: deprecated, do not use for new keys.

Koblitz curves are binary curves y² + xy = x³ + ax² + 1 with a = 0 or 1; their Frobenius endomorphism lets implementations replace point doublings with cheap squarings (τ-adic scalar multiplication). sect163k1 uses a = 1, the degree-163 reduction polynomial f shown above and cofactor 2, for about 80 bits of security.

FIPS 186-2 to 186-4 listed it as K-163. NIST SP 800-186 (2023) deprecates every curve over a binary field, and RFC 8422 deprecated them for TLS. At about 80 bits of security it is also below the 112-bit minimum, so NIST treats it as legacy-use only. OpenSSL can be built without binary-curve support (no-ec2m).

Names in standards

StandardName
SEC 2sect163k1
NIST FIPS 186-4 (withdrawn)K-163

Object identifiers

Domain parameters

binary field GF(2^163) · about 80-bit security

Field degree m
0xa3
Reduction polynomial f
0x800000000000000000000000000000000000000c9
Coefficient a
0x1
Coefficient b
0x1
Base point x
0x2fe13c0537bbc11acaa07d793de4e6d5e5c94eee8
Base point y
0x289070fb05d38ff58321f2e800536d538ccdaa3d9
Order n of the base point
0x4000000000000000000020108a2e0cc0d99f8a5ef
Cofactor h
0x2

Used in

  • Legacy TLS 1.2 (RFC 8422)
  • Legacy X.509 certificates

Identifiers in registries

TLS supported groups
sect163k1 0x0001

Standards and references

All curves