Skip to content
ecdsa.com
DeprecatedBinary Weierstrass

sect409r1

sect409r1 (NIST B-409) is a pseudo-random curve over the binary field GF(2^409); NIST has deprecated it.

sect409r1 is a binary Weierstrass curve y² + xy = x³ + ax² + b over the binary field GF(2^409) with a 409-bit prime-order subgroup and cofactor 2; its estimated security level is 192 bits. Status: deprecated, do not use for new keys.

sect409r1 is y² + xy = x³ + x² + b over GF(2^409) with the reduction polynomial f shown above; b was derived from the listed seed with SHA-1 (ANSI X9.62). The group has cofactor 2 and about 192 bits of security.

FIPS 186-2 to 186-4 listed it as B-409. NIST SP 800-186 (2023) deprecates every curve over a binary field, and RFC 8422 deprecated them for TLS. OpenSSL can be built without binary-curve support (no-ec2m).

Names in standards

StandardName
SEC 2sect409r1
NIST FIPS 186-4 (withdrawn)B-409

Object identifiers

Domain parameters

binary field GF(2^409) · about 192-bit security

Field degree m
0x199
Reduction polynomial f
0x2000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000001
Coefficient a
0x1
Coefficient b
0x21a5c2c8ee9feb5c4b9a753b7b476b7fd6422ef1f3dd674761fa99d6ac27c8a9a197b272822f6cd57a55aa4f50ae317b13545f
Base point x
0x15d4860d088ddb3496b0c6064756260441cde4af1771d4db01ffe5b34e59703dc255a868a1180515603aeab60794e54bb7996a7
Base point y
0x61b1cfab6be5f32bbfa78324ed106a7636b9c5a7bd198d0158aa4f5488d08f38514f1fdf4b4f40d2181b3681c364ba0273c706
Order n of the base point
0x10000000000000000000000000000000000000000000000000001e2aad6a612f33307be5fa47c3c9e052f838164cd37d9a21173
Cofactor h
0x2
Seed
0x4099b5a457f9d69f79213d094c4bcd4d4262210b

Used in

  • Legacy TLS 1.2 (RFC 8422)
  • Legacy X.509 certificates

Identifiers in registries

TLS supported groups
sect409r1 0x000C

Standards and references

All curves