Knowledge Base
Elliptic-Curve Parameter
A

CURVE_­22103

Summary

Name:
CURVE_22103
Long Name:
CURVE_22103
Key size:
221 bits
Publishers:

Check your host!

Type a URL to analyze a service

Get a prompt and clear overview of your security configuration. Right now!

Security

A+
Key Size
Security

The elliptic-curve cryptography[118][119][120][121] is an approach to public-key cryptography[164][165][166] based on the elliptic curve[116][117]s. The most important property in terms of encryption strength, beyond the designer is elliptic curve key size[292][293][294]. All the key sizes available are considered secure, so there is no consideration about it.

A+
Trusted Design
Security

The elliptic-curve cryptography[118][119][120][121] is an approach to public-key cryptography[164][165][166] based on the elliptic curve[116][117]s. Note that there is controversy[287][288][289][290][291] around some of the National Institute of Standards and Technology[470][471] designed elliptic curveselliptic curves designed by NIST[285][286]. This elliptic curve designed by independent researcher[284] Daniel J. Bernstein[476][477] and there is no evidence for any compromise.

Recommendations

Add at least one elliptic curve to the list of elliptic curves supported by your server designed by independent researchers and prefer them as server configuration makes it possible.

A
Post-Quantum
Security

The elliptic curve[116][117] cryptography provides no protection against a cryptanalytic attack by a quantum computer, and no classical elliptic curve does — just as classical Diffie-Hellman does not — because a quantum computer breaks the hardness assumption they rely on. Only a hybrid key exchange (a classical algorithm combined with a post-quantum cryptography[158][159] one) or a pure post-quantum algorithm is quantum-safe.

Recommendations

Enable a hybrid key exchange or a pure post-quantum algorithm on your server, and prefer it where the configuration allows, so the connection stays secure against a future quantum computer.

Parameter Numbers

Prime (p)
0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffd
Copy to clipboard
Coefficient (a)
0x155555555555555555555555555555555555555555555552174084ff
Copy to clipboard
Coefficient (b)
0x1425ed097b425ed097b425ed097b425ed097b425ed0bba9428427967
Copy to clipboard
Generator (x)
0xcb476fe081b61f56a60b1d1b34fb7207d072ef25dadf377731049b0
Copy to clipboard
Generator (y)
0x36429404d97e1e217bad2e5601f6551f95d8fe9481bd454d1f3e7b6
Copy to clipboard
Order (n)
0x3fffffffffffffffffffffffffff5cd04695a145c3067cf4aae2025
Copy to clipboard
Cofactor (h)
0x8
Copy to clipboard

Representations

PEM

-----BEGIN EC PARAMETERS-----
MIHGAgEBMCcGByqGSM49AQECHB////////////////////////////////////0w
PAQcFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVSF0CE/wQcFCXtCXtCXtCXtCXtCXtC
XtCXtCXtC7qUKEJ5ZwQ5BAy0dv4IG2H1amCx0bNPtyB9By7yXa3zd3MQSbADZClA
TZfh4he60uVgH2VR+V2P6Ugb1FTR8+e2AhwD//////////////////XNBGlaFFww
Z89KriAlAgEI
-----END EC PARAMETERS-----
Download ecparam.pem
Copy to clipboard

PARI/GP

p = 0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffd;
a = 0x155555555555555555555555555555555555555555555552174084ff;
b = 0x1425ed097b425ed097b425ed097b425ed097b425ed0bba9428427967;
E = ellinit([a, b], p);
G = [0xcb476fe081b61f56a60b1d1b34fb7207d072ef25dadf377731049b0, 0x36429404d97e1e217bad2e5601f6551f95d8fe9481bd454d1f3e7b6];
n = 0x3fffffffffffffffffffffffffff5cd04695a145c3067cf4aae2025;
h = 0x8;
Copy to clipboard

LaTeX

$\begin{aligned}
y^2 &\equiv x^3 + a x + b \pmod{p} \\
p &= 0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffd \\
a &= 0x155555555555555555555555555555555555555555555552174084ff \\
b &= 0x1425ed097b425ed097b425ed097b425ed097b425ed0bba9428427967 \\
G &= (0xcb476fe081b61f56a60b1d1b34fb7207d072ef25dadf377731049b0, 0x36429404d97e1e217bad2e5601f6551f95d8fe9481bd454d1f3e7b6) \\
n &= 0x3fffffffffffffffffffffffffff5cd04695a145c3067cf4aae2025 \\
h &= 0x8
\end{aligned}$
Copy to clipboard