Koblitz curves

E192666

Koblitz curves are a special class of elliptic curves defined over binary fields that enable particularly efficient and fast implementations of elliptic curve cryptography.

All labels observed (2)

How this entity was disambiguated

Statements (47)

Predicate Object
instanceOf cryptographic primitive
elliptic curve family
mathematical object
advantage good performance in hardware implementations
good performance in smart cards and embedded systems
lower computational cost for scalar multiplication
reduced memory requirements in some implementations
category anomalous binary curves are excluded
comparedTo prime-field elliptic curves
random binary curves
comparisonResult may be more efficient on certain hardware architectures
offer faster scalar multiplication than generic binary curves
curveEquationForm y^2 + xy = x^3 + ax^2 + 1 over GF(2^m)
definedOver GF(2^m)
disadvantage limited parameter choices
potentially less flexibility in security tuning
some standardization bodies have moved away from binary curves
fieldType binary field
hasProperty admit Frobenius endomorphism-based methods
can be implemented with mixed Frobenius-and-add algorithms
can reduce number of required elliptic curve additions
can reduce number of required elliptic curve doublings
defined over characteristic two fields
enable windowed τ-adic non-adjacent form representations
have efficiently computable Frobenius map
suitable for constrained devices
support precomputation techniques for further speedup
support τ-adic scalar multiplication
supports efficient scalar multiplication
supports fast implementation
introducedBy Neal Koblitz
introducedIn late 1980s
namedAfter Neal Koblitz
parameter a ∈ {0,1}
relatedTo Frobenius element
surface form: Frobenius endomorphism

binary elliptic curves
non-adjacent form (NAF)
τ-adic expansion
securityDependsOn elliptic curve discrete logarithm problem
specialCaseOf elliptic curves over GF(2^m)
standardizedIn Koblitz curves self-linksurface differs
surface form: ANSI X9.62 historical binary curve sections

SEC 2 (Standards for Efficient Cryptography) historical recommendations
usedFor digital signatures
encryption schemes
key agreement
usedIn elliptic curve cryptography
public key cryptography

How these facts were elicited

Referenced by (2)

Full triples — surface form annotated when it differs from this entity's canonical label.

Elliptic Curve Cryptography hasVariant Koblitz curves
Koblitz curves standardizedIn Koblitz curves self-linksurface differs
this entity surface form: ANSI X9.62 historical binary curve sections