词条 | Curve448 |
释义 |
In cryptography, Curve448 or Curve448-Goldilocks is an elliptic curve potentially offering 224 bits of security and designed for use with the elliptic curve Diffie–Hellman (ECDH) key agreement scheme. Developed by Mike Hamburg of Rambus Cryptography Research, Curve448 allows fast performance compared with other proposed curves with comparable security.[1] The reference implementation is available under an MIT license.[2] The curve is favored by the Internet Research Task Force Crypto Forum Research Group (IRTF CFRG) for inclusion in future TLS standards along with Curve25519. In 2017, NIST announced that Curve25519 and Curve448 would be added to Special Publication 800-186, which specifies approved elliptic curves for use by the US Federal Government.[3] Both are described in [https://tools.ietf.org/html/rfc7748 RFC 7748]. Mathematical propertiesHamburg chose the Solinas trinomial prime base p = 2448 − 2224 − 1, calling it a “Goldilocks” prime “because its form defines the golden ratio φ ≡ 2224.” The main advantage of a golden-ratio prime is fast Karatsuba multiplication. The curve Hamburg used is an untwisted Edwards curve Ed: {{math|y2 + x2 {{=}} 1 − 39081x2y2}}. The constant d = −39081 was chosen as the smallest absolute value that had the required mathematical properties, thus a nothing up my sleeve number. Curve448 is constructed such that it avoids many potential implementation pitfalls.[4] See also
References1. ^[https://eprint.iacr.org/2015/625.pdf Ed448-Goldilocks, a new elliptic curve], Mike Hamburg, 2015 {{crypto-stub}}2. ^https://sourceforge.net/p/ed448goldilocks/code/ci/master/tree/ 3. ^{{cite web|url=https://csrc.nist.gov/News/2017/Transition-Plans-for-Key-Establishment-Schemes|title=Transition Plans for Key Establishment Schemes}} 4. ^{{Cite web|title = SafeCurves: Introduction|url = https://safecurves.cr.yp.to|website = safecurves.cr.yp.to|accessdate = 2018-02-23}} 1 : Elliptic curves |
随便看 |
|
开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。