Knowledge Base
Elliptic-Curve Parameter
A

Tom-521

Summary

Name:
Tom-521
Long Name:
Tom (521-bit)
Key size:
522 bits
Publishers:

Check your host!

Type a URL to analyze a service

Get a prompt and clear overview of your security configuration. Right now!

Security

A+
Key Size
Security

The elliptic-curve cryptography[118][119][120][121] is an approach to public-key cryptography[164][165][166] based on the elliptic curve[116][117]s. The most important property in terms of encryption strength, beyond the designer is elliptic curve key size[292][293][294]. All the key sizes available are considered secure, so there is no consideration about it.

A+
Trusted Design
Security

The elliptic-curve cryptography[118][119][120][121] is an approach to public-key cryptography[164][165][166] based on the elliptic curve[116][117]s. Note that there is controversy[287][288][289][290][291] around some of the National Institute of Standards and Technology[470][471] designed elliptic curveselliptic curves designed by NIST[285][286]. This elliptic curve designed by independent researcher[284] Daniel J. Bernstein[476][477] and there is no evidence for any compromise.

Recommendations

Add at least one elliptic curve to the list of elliptic curves supported by your server designed by independent researchers and prefer them as server configuration makes it possible.

A
Post-Quantum
Security

The elliptic curve[116][117] cryptography provides no protection against a cryptanalytic attack by a quantum computer, and no classical elliptic curve does — just as classical Diffie-Hellman does not — because a quantum computer breaks the hardness assumption they rely on. Only a hybrid key exchange (a classical algorithm combined with a post-quantum cryptography[158][159] one) or a pure post-quantum algorithm is quantum-safe.

Recommendations

Enable a hybrid key exchange or a pure post-quantum algorithm on your server, and prefer it where the configuration allows, so the connection stays secure against a future quantum computer.

Parameter Numbers

Prime (p)
0x200000000000000000000000000000000000000000000000000000000000000002c54be78524c33584f734a266748b2063accf5028e6778dc5056476d0690853249
Copy to clipboard
Coefficient (a)
0xef6432c21701cc48c63fb9263e14ba76d4a94ba14d173b134e3032b0e2e543180eb6725125992a7d00162a5f57d21918b0766364eeb53c53bb12f405dac1d527e2
Copy to clipboard
Coefficient (b)
0x3cbc65d1e0245d79703b18e9aaea1ac6d67f87a2cd4bd84b9e6df6a45a979c481825ca5a857270fc890352f9fac7fd6020deaabb28d099718f0f77a4eec222871d
Copy to clipboard
Generator (x)
0x0
Copy to clipboard
Generator (y)
0xf554773eeaa1f476e77888c5df8e8d766c6dae01ad54ffe6982ae7ae772e4a80e7c3dec699aa6d3fd93c1d2b019519cd1c627939a52d30f14a7b67725e7c13471c
Copy to clipboard
Order (n)
0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
Copy to clipboard
Cofactor (h)
0x1
Copy to clipboard

Representations

PEM

-----BEGIN EC PARAMETERS-----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-----END EC PARAMETERS-----
Download ecparam.pem
Copy to clipboard

PARI/GP

p = 0x200000000000000000000000000000000000000000000000000000000000000002c54be78524c33584f734a266748b2063accf5028e6778dc5056476d0690853249;
a = 0xef6432c21701cc48c63fb9263e14ba76d4a94ba14d173b134e3032b0e2e543180eb6725125992a7d00162a5f57d21918b0766364eeb53c53bb12f405dac1d527e2;
b = 0x3cbc65d1e0245d79703b18e9aaea1ac6d67f87a2cd4bd84b9e6df6a45a979c481825ca5a857270fc890352f9fac7fd6020deaabb28d099718f0f77a4eec222871d;
E = ellinit([a, b], p);
G = [0x0, 0xf554773eeaa1f476e77888c5df8e8d766c6dae01ad54ffe6982ae7ae772e4a80e7c3dec699aa6d3fd93c1d2b019519cd1c627939a52d30f14a7b67725e7c13471c];
n = 0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff;
h = 0x1;
Copy to clipboard

LaTeX

$\begin{aligned}
y^2 &\equiv x^3 + a x + b \pmod{p} \\
p &= 0x200000000000000000000000000000000000000000000000000000000000000002c54be78524c33584f734a266748b2063accf5028e6778dc5056476d0690853249 \\
a &= 0xef6432c21701cc48c63fb9263e14ba76d4a94ba14d173b134e3032b0e2e543180eb6725125992a7d00162a5f57d21918b0766364eeb53c53bb12f405dac1d527e2 \\
b &= 0x3cbc65d1e0245d79703b18e9aaea1ac6d67f87a2cd4bd84b9e6df6a45a979c481825ca5a857270fc890352f9fac7fd6020deaabb28d099718f0f77a4eec222871d \\
G &= (0x0, 0xf554773eeaa1f476e77888c5df8e8d766c6dae01ad54ffe6982ae7ae772e4a80e7c3dec699aa6d3fd93c1d2b019519cd1c627939a52d30f14a7b67725e7c13471c) \\
n &= 0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \\
h &= 0x1
\end{aligned}$
Copy to clipboard