secp256k1

E831062

secp256k1 is a widely used elliptic curve defined over a 256-bit prime field, best known as the cryptographic foundation for Bitcoin and several other blockchain systems.

Jump to: Statements Referenced by

Statements (48)

Predicate Object
instanceOf Koblitz curve
cryptographic primitive
elliptic curve
aCoefficient 0
basePointOrder large prime
basePointOrderSymbol n
basePointSymbol G
bCoefficient 7
belongsToFamily SECG recommended curves NERFINISHED
bestKnownAs elliptic curve used by Bitcoin
category elliptic curve over prime field
cofactor 1
cofactorSymbol h
curveEquation y^2 = x^3 + 7
curveEquationForm short Weierstrass form
definedOver prime field
designProperty Koblitz-like structure enabling efficient implementation
no known efficiently exploitable special structure
discreteLogProblem elliptic curve discrete logarithm problem
fieldSize 256-bit
groupOperation elliptic curve point addition
groupStructure cyclic group generated by base point G
implementedInLibrary libsecp256k1 NERFINISHED
introduced late 1990s
keySizeTypical 256-bit private keys
libsecp256k1Maintainer Bitcoin Core developers NERFINISHED
notation secp256k1 = "Standards for Efficient Cryptography prime 256-bit curve k1"
primeModulus 2^256 - 2^32 - 977
primeModulusHex 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F
primeModulusSymbol p
publicKeyRepresentation points on the curve over F_p
securityAssumption hardness of elliptic curve discrete logarithm problem
securityLevel approximately 128-bit classical security
specifiedBy Standards for Efficient Cryptography Group NERFINISHED
standardizedIn SEC 2: Recommended Elliptic Curve Domain Parameters NERFINISHED
supportsAlgorithm EC-Schnorr signatures
ECDSA
usedBy Bitcoin Core software NERFINISHED
usedFor digital signatures
elliptic curve cryptography
key agreement
public-key cryptography
usedIn Bitcoin NERFINISHED
Bitcoin-like cryptocurrencies
ECDSA implementations
Ethereum (pre-ERC-4337 account model) NERFINISHED
blockchain wallets
many other blockchain systems

Referenced by (1)

Full triples — surface form annotated when it differs from this entity's canonical label.

ECC notableCurveFamilies secp256k1