SEC X.2: Recommended Elliptic Curve Domain Parameters

By Nippon Telephone, Kazumaro Aoki, Tetsutaro Kobayashi, Akira Nagai. 2008

409 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Provisions: Privacy-preserving Proofs of Solvency for Bitcoin Exchanges (2015, methodology): “Our implementation uses the elliptic curve secp256k1 [6] as the group G; this is the group used for Bitcoin ECDSA signatures.”
Compact Multi-Signatures for Smaller Blockchains (2018, methodology): “…column shows the concrete number of bytes taken in a bitcoin block by choosing some sample parameters ( tx = 1500, inp = 3, n = 3), using secp256k1 [18] for Bitcoin, MuSig , and MSDL schemes ( | G | = 64 B , | Z q | = 32 B ), and BLS381 [6] for the pairing-based MSP , AMSP , and ASM schemes ( | G…”
Bitcoin and Beyond: A Technical Survey on Decentralized Digital Currencies (2016, methodology): “For transaction signatures, the elliptic curve digital signature algorithm (ECDSA) as standardized by NIST [80] is used, parametrized by the secp256k1 curve defined by [81].”
TumbleBit: An Untrusted Bitcoin-Compatible Anonymous Payment Hub (2017, background): “Thus, there is a risk that the Tumbler could correlate the timing of its interactions with A and B in order to link their payment.”