Skip to content
ecdsa.com
DeprecatedBinary Weierstrass

sect409k1

sect409k1 (NIST K-409) is a Koblitz curve over the binary field GF(2^409); NIST has deprecated it.

sect409k1 is a binary Weierstrass curve y² + xy = x³ + ax² + b over the binary field GF(2^409) with a 407-bit prime-order subgroup and cofactor 4; its estimated security level is 192 bits. Status: deprecated, do not use for new keys.

Koblitz curves are binary curves y² + xy = x³ + ax² + 1 with a = 0 or 1; their Frobenius endomorphism lets implementations replace point doublings with cheap squarings (τ-adic scalar multiplication). sect409k1 uses a = 0, the degree-409 reduction polynomial f shown above and cofactor 4, for about 192 bits of security.

FIPS 186-2 to 186-4 listed it as K-409. NIST SP 800-186 (2023) deprecates every curve over a binary field, and RFC 8422 deprecated them for TLS. OpenSSL can be built without binary-curve support (no-ec2m).

Names in standards

StandardName
SEC 2sect409k1
NIST FIPS 186-4 (withdrawn)K-409

Object identifiers

Domain parameters

binary field GF(2^409) · about 192-bit security

Field degree m
0x199
Reduction polynomial f
0x2000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000001
Coefficient a
0x0
Coefficient b
0x1
Base point x
0x60f05f658f49c1ad3ab1890f7184210efd0987e307c84c27accfb8f9f67cc2c460189eb5aaaa62ee222eb1b35540cfe9023746
Base point y
0x1e369050b7c4e42acba1dacbf04299c3460782f918ea427e6325165e9ea10e3da5f6c42e9c55215aa9ca27a5863ec48d8e0286b
Order n of the base point
0x7ffffffffffffffffffffffffffffffffffffffffffffffffffe5f83b2d4ea20400ec4557d5ed3e3e7ca5b4b5c83b8e01e5fcf
Cofactor h
0x4

Used in

  • Legacy TLS 1.2 (RFC 8422)
  • Legacy X.509 certificates

Identifiers in registries

TLS supported groups
sect409k1 0x000B

Standards and references

All curves