DiSSECT
About
Curves
Standards
Overview
ANSI X9.62
SECG
Brainpool
NIST: FIPS 186
NUMS
ANSSI FRP256v1
OSCCA SM2
GOST R
IEEE P1363
Traits
Analysis
Paper
Slides
Curve detail
Description
Attribute
Value
Name
secp224k1
Category
secg
Description
A Koblitz curve.
Field
Prime (26959946667150639794667015087019630673637144422540572481099315275117)
Field bits
224
Form
Weierstrass $y^2 = x^3 + ax + b$
Param $a$
0
Param $b$
5
Generator $x$
16983810465656793445178183341822322175883642221536626637512293983324
Generator $y$
13272896753306862154536785447615077600479862871316829862783613755813
Order
26959946667150639794667015087019640346510327083120074548994958668279
Cofactor
1
$j$-invariant
0
Trace $t$
-9672873182660579502067895643393161
Embedding degree $k$
4493324444525106632444502514503273391085054513853345758165826444713
CM discriminant
-3
Traits
Trait
cofactor: The order of the prime order subgroup and its cofactor
discriminant: Factorization of the discriminant of the Frobenius polynomial, i.e. factorization of $t^2-4p=v^2d_K$, where $t$ is the trace of Frobenius, $v$ is the maximal conductor and $d_K$ is the CM discriminant.
twist_order: Factorization of the quadratic twist cardinality in an extension, i.e. $\#E(\mathbb{F}_{p^d})$.
kn_factorization: Factorization of $kn \pm 1$ where $n$ is the cardinality of the curve.
torsion_extension: Degrees of field extensions containing the least nontrivial $l$-torsion, the full $l$-torsion and their relative degree of extension.
conductor: Factorization of ratio of the maximal conductors of CM-field over an extension and over a basefield.
embedding: The complement of the embedding degree, i.e. $(n-1)/e$ where $n$ is the prime-subgroup order and $e$ is the embedding degree.
class_number: Upper and lower bound for the class number of the CM-field.
small_prime_order: Multiplicative orders of small primes modulo the prime-subgroup order.
division_polynomials: Factorizations of small division polynomials.
volcano: Volcano depth and crater degree of the $l$-isogeny graph.
isogeny_extension: The least field extensions containing a nontrivial number and full number of $l$-isogenies and their relative ratio.
trace_factorization: Factorization of trace in field extensions.
isogeny_neighbors: Number of $j$-invariants adjacent to the curve by $l$-isogeny. This is the degree of the point in the $l$-isogeny graph.
q_torsion: Torsion order of the lift of $E$ to $Q$.
hamming_x: Number of points with low Hamming weight of the $x$-coordinate and the expected weight.
square_4p1: Square parts of $4q \pm 1$ and $4n \pm 1$.
pow_distance: Distance of $n$ from the nearest power of two and multiple of 32/64.
multiples_x: Bitlength of the $x$-coordinate of small inverted generator scalar multiples, i.e. $x$-coordinate of $P$ where $kP=G$. The difference and ratio to the bitlength of the whole group is also considered.
x962_invariant: Computation of $a^3/b^2$.
brainpool_overlap: Bit overlaps in curve coefficients
weierstrass: Coefficients of the curve in Weierstrass form
Params
Output
Result
Log-scale