Knowledge Base
Elliptic-Curve Parameter
A

c2pnb304w1

Summary

Name:
c2pnb304w1
Long Name:
c2pnb304w1 elliptic curve (binary field GF(2^304))
Key size:
304 bits
Object identifier:
1.2.840.10045.3.0.17
Publishers:

Check your host!

Type a URL to analyze a service

Get a prompt and clear overview of your security configuration. Right now!

Security

A+
Key Size
Security

The elliptic-curve cryptography[118][119][120][121] is an approach to public-key cryptography[164][165][166] based on the elliptic curve[116][117]s. The most important property in terms of encryption strength, beyond the designer is elliptic curve key size[292][293][294]. All the key sizes available are considered secure, so there is no consideration about it.

A+
Trusted Design
Security

The elliptic-curve cryptography[118][119][120][121] is an approach to public-key cryptography[164][165][166] based on the elliptic curve[116][117]s. Note that there is controversy[287][288][289][290][291] around some of the National Institute of Standards and Technology[470][471] designed elliptic curveselliptic curves designed by NIST[285][286]. This elliptic curve designed by independent researcher[284] Daniel J. Bernstein[476][477] and there is no evidence for any compromise.

Recommendations

Add at least one elliptic curve to the list of elliptic curves supported by your server designed by independent researchers and prefer them as server configuration makes it possible.

A
Post-Quantum
Security

The elliptic curve[116][117] cryptography provides no protection against a cryptanalytic attack by a quantum computer, and no classical elliptic curve does — just as classical Diffie-Hellman does not — because a quantum computer breaks the hardness assumption they rely on. Only a hybrid key exchange (a classical algorithm combined with a post-quantum cryptography[158][159] one) or a pure post-quantum algorithm is quantum-safe.

Recommendations

Enable a hybrid key exchange or a pure post-quantum algorithm on your server, and prefer it where the configuration allows, so the connection stays secure against a future quantum computer.

Parameter Numbers

Coefficient (a)
0xfd0d693149a118f651e6dce6802085377e5f882d1b510b44160074c1288078365a0396c8e681
Copy to clipboard
Coefficient (b)
0xbddb97e555a50a908e43b01c798ea5daa6788f1ea2794efcf57166b8c14039601e55827340be
Copy to clipboard
Generator (x)
0x197b07845e9be2d96adb0f5f3c7f2cffbd7a3eb8b6fec35c7fd67f26ddf6285a644f740a2614
Copy to clipboard
Generator (y)
0xe19fbeb76e0da171517ecf401b50289bf014103288527a9b416a105e80260b549fdc1b92c03b
Copy to clipboard
Order (n)
0x101d556572aabac800101d556572aabac8001022d5c91dd173f8fb561da6899164443051d
Copy to clipboard
Cofactor (h)
0xfe2e
Copy to clipboard

Representations

PEM

-----BEGIN EC PARAMETERS-----
BggqhkjOPQMAEQ==
-----END EC PARAMETERS-----
Download ecparam.pem
Copy to clipboard

PARI/GP

m = 304;
\\ reduction polynomial: z^304 + z^11 + z^2 + z^1 + 1
a = 0xfd0d693149a118f651e6dce6802085377e5f882d1b510b44160074c1288078365a0396c8e681;
b = 0xbddb97e555a50a908e43b01c798ea5daa6788f1ea2794efcf57166b8c14039601e55827340be;
\\ curve: y^2 + x*y = x^3 + a*x^2 + b over GF(2^m)
G = [0x197b07845e9be2d96adb0f5f3c7f2cffbd7a3eb8b6fec35c7fd67f26ddf6285a644f740a2614, 0xe19fbeb76e0da171517ecf401b50289bf014103288527a9b416a105e80260b549fdc1b92c03b];
n = 0x101d556572aabac800101d556572aabac8001022d5c91dd173f8fb561da6899164443051d;
h = 0xfe2e;
Copy to clipboard

LaTeX

$\begin{aligned}
y^2 + x y &= x^3 + a x^2 + b \pmod{f(z)} \\
f(z) &= z^{304} + z^{11} + z^{2} + z^{1} + 1 \\
a &= 0xfd0d693149a118f651e6dce6802085377e5f882d1b510b44160074c1288078365a0396c8e681 \\
b &= 0xbddb97e555a50a908e43b01c798ea5daa6788f1ea2794efcf57166b8c14039601e55827340be \\
G &= (0x197b07845e9be2d96adb0f5f3c7f2cffbd7a3eb8b6fec35c7fd67f26ddf6285a644f740a2614, 0xe19fbeb76e0da171517ecf401b50289bf014103288527a9b416a105e80260b549fdc1b92c03b) \\
n &= 0x101d556572aabac800101d556572aabac8001022d5c91dd173f8fb561da6899164443051d \\
h &= 0xfe2e
\end{aligned}$
Copy to clipboard