Skip to content
ecdsa.com
DeprecatedBinary Weierstrass

sect571k1

sect571k1 (NIST K-571) is a Koblitz curve over the binary field GF(2^571); NIST has deprecated it.

sect571k1 is a binary Weierstrass curve y² + xy = x³ + ax² + b over the binary field GF(2^571) with a 570-bit prime-order subgroup and cofactor 4; its estimated security level is 256 bits. Status: deprecated, do not use for new keys.

Koblitz curves are binary curves y² + xy = x³ + ax² + 1 with a = 0 or 1; their Frobenius endomorphism lets implementations replace point doublings with cheap squarings (τ-adic scalar multiplication). sect571k1 uses a = 0, the degree-571 reduction polynomial f shown above and cofactor 4, for about 256 bits of security.

FIPS 186-2 to 186-4 listed it as K-571. NIST SP 800-186 (2023) deprecates every curve over a binary field, and RFC 8422 deprecated them for TLS. OpenSSL can be built without binary-curve support (no-ec2m).

Names in standards

StandardName
SEC 2sect571k1
NIST FIPS 186-4 (withdrawn)K-571

Object identifiers

Domain parameters

binary field GF(2^571) · about 256-bit security

Field degree m
0x23b
Reduction polynomial f
0x80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000425
Coefficient a
0x0
Coefficient b
0x1
Base point x
0x26eb7a859923fbc82189631f8103fe4ac9ca2970012d5d46024804801841ca44370958493b205e647da304db4ceb08cbbd1ba39494776fb988b47174dca88c7e2945283a01c8972
Base point y
0x349dc807f4fbf374f4aeade3bca95314dd58cec9f307a54ffc61efc006d8a2c9d4979c0ac44aea74fbebbb9f772aedcb620b01a7ba7af1b320430c8591984f601cd4c143ef1c7a3
Order n of the base point
0x20000000000000000000000000000000000000000000000000000000000000000000000131850e1f19a63e4b391a8db917f4138b630d84be5d639381e91deb45cfe778f637c1001
Cofactor h
0x4

Used in

  • Legacy TLS 1.2 (RFC 8422)
  • Legacy X.509 certificates

Identifiers in registries

TLS supported groups
sect571k1 0x000D

Standards and references

All curves