One of the fastest ECC curves, and being used by Monero. It offers 128 bits of security and designed for use with the elliptic curve Diffie–Hellman (ECDH) key agreement scheme.
Questions tagged [curve25519]
8 questions
10
votes
1 answer
How to see that the RingCT commitment parameter H is in fact a multiple of the base point G
On the last paragraph of page 7 of Monero Research Lab's paper about RingCT, the author makes some statements to the effect that it is possible to pick a random point on the base curve ED25519 that is on the subgroup generated by its base point G,…
user141
- 3,337
- 14
- 34
10
votes
1 answer
Comparison of Curve25519 with secp256k1?
How does the security of Curve25519 compare with secp256k1? Is it known why the creators of CryptoNote may have chosen one curve over the other?
Logan
- 808
- 1
- 9
- 16
8
votes
2 answers
What level of cryptographic review has the current Monero protocol received?
What are the backgrounds of the members of the Monero Research Lab? What amount of known peer review have their publications received?
Independent of Monero itself, how much Cryptographic review has their been of EdDSA for signatures, and…
Susan
- 1,428
- 1
- 16
- 19
5
votes
1 answer
Where does Curve25519's limit occur?
While informing myself on the inner-working of Monero, I stumbled on Curve25519.
The CryptoNote White Paper states:
l: a prime order of the base point; l = 2^252 + 27742317777372353535851937790883648493;
[...]
private ec-key is a standard…
Maxithi
- 577
- 2
- 15
5
votes
1 answer
What is elliptic curve cryptography and why is it important to Monero?
What is elliptic curve cryptography and why is it important to Monero?
Please provide both a basic description and an in depth description of the type found on Moneropedia
guesswhoiam
- 1,010
- 1
- 9
- 21
5
votes
2 answers
Curve used in Monero - A Subgroup of Ed25519?
I am a student researcher at IIT Bombay (India). I have been recently understanding the cryptography behind Monero as well as its implementation.
The elliptic curve used in the CryptoNote protocol is Ed25519 (of order 8q, where q is a prime). This…
Suyash Bagad
- 51
- 4
3
votes
1 answer
ed25519 point structs
What do each of these structs represent?
What is the difference between them?
typedef struct {
fe X;
fe Y;
fe Z;
} ge_p2;
typedef struct {
fe X;
fe Y;
fe Z;
fe T;
} ge_p3;
typedef struct {
fe X;
fe Y;
fe Z;
fe T;
}…
joshuag
- 69
- 3
2
votes
1 answer
How to convert monero's curve25519 basepoint to bouncycastle
This is how to get the curve25519 basepoint in monero (use js console at https://xmr.llcoins.net/)
> var identity = "0100000000000000000000000000000000000000000000000000000000000000"
> var base = ge_scalarmult_base(identity)
>…
Lustiger Astronaut
- 115
- 4