Safe curves for elliptic-curve cryptography

Daniel J. Bernstein; Tanja Lange

Paper 2024/1265

Safe curves for elliptic-curve cryptography

Daniel J. Bernstein

Tanja Lange

Abstract

This paper surveys interactions between choices of elliptic curves and the security of elliptic-curve cryptography. Attacks considered include not just discrete-logarithm computations but also attacks exploiting common implementation pitfalls.

Metadata

Available format(s): PDF
Category: Public-key cryptography
Publication info: Published elsewhere. Information security in a connected world: celebrating the life and work of Ed Dawson
Contact author(s): authorcontact-safecurves-djb @ box cr yp to
tanja @ hyperelliptic org
History: 2024-08-12: approved; 2024-08-09: received; See all versions
Short URL: https://ia.cr/2024/1265
License: CC BY

BibTeX

@misc{cryptoeprint:2024/1265,
      author = {Daniel J. Bernstein and Tanja Lange},
      title = {Safe curves for elliptic-curve cryptography},
      howpublished = {Cryptology {ePrint} Archive, Paper 2024/1265},
      year = {2024},
      url = {https://eprint.iacr.org/2024/1265}
}