Elliptic Curves for Security (RFC 7748)

This memo specifies two elliptic curves over prime fields:

• x25519 -- Curve25519 for the ~128-bit security level.
• x448 -- Curve448 for the ~224-bit security level.

References

• Elliptic Curves for Security (RFC 7748), 2016
• RFC 7748 Errata
• Fundamental Elliptic Curve Cryptography Algorithms (RFC 6090), 2011
• SafeCurves: choosing safe curves for elliptic-curve cryptography, accessed ver2017.01.22
• tlslite-ng/tlslite/utils/x25519.py (GitHub)
• x448-python (GitHub)

---

• Curve25519: new Diffie-Hellman speed records, 2006
• Speeding the Pollard and Elliptic Curve Methods of Factorization, 1987
• SEC 1: Elliptic Curve Cryptography, 2009