RFC 7748: Elliptic Curves for Security

This memo specifies two elliptic curves over prime fields that offer a high level of practical security in cryptographic applications, including Transport…

Read RFC 7748 on the RFC Editor

Incoming relationships (33 related RFCs)

Normatively referenced by — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normatively referenced by — RFC 8152: CBOR Object Signing and Encryption (COSE)
Normatively referenced by — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normatively referenced by — RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier
Normatively referenced by — RFC 9053: CBOR Object Signing and Encryption (COSE): Initial Algorithms
Normatively referenced by — RFC 8410: Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure
Normatively referenced by — RFC 9380: Hashing to Elliptic Curves
Normatively referenced by — RFC 8037: CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE)
Normatively referenced by — RFC 9528: Ephemeral Diffie-Hellman Over COSE (EDHOC)
Normatively referenced by — RFC 8418: Use of the Elliptic Curve Diffie-Hellman Key Agreement Algorithm with X25519 and X448 in the Cryptographic Message Syntax (CMS)
Normatively referenced by — RFC 9580: OpenPGP
Normatively referenced by — RFC 8080: Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC
Normatively referenced by — RFC 9140: Nimble Out-of-Band Authentication for EAP (EAP-NOOB)
Normatively referenced by — RFC 8031: Curve25519 and Curve448 for the Internet Key Exchange Protocol Version 2 (IKEv2) Key Agreement
Normatively referenced by — RFC 8732: Generic Security Service Application Program Interface (GSS-API) Key Exchange with SHA-2
Normatively referenced by — RFC 9231: Additional XML Security Uniform Resource Identifiers (URIs)
Normatively referenced by — RFC 9941: Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512
Normatively referenced by — RFC 9498: The GNU Name System
Normatively referenced by — RFC 9588: Kerberos Simple Password-Authenticated Key Exchange (SPAKE) Pre-authentication
Normatively referenced by — RFC 9980: Post-Quantum Cryptography in OpenPGP
Normatively referenced by — RFC 10024: Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3
Informatively referenced by — RFC 8411: IANA Registration for the Cryptographic Algorithm Object Identifier Range
Informatively referenced by — RFC 8731: Secure Shell (SSH) Key Exchange Method Using Curve25519 and Curve448
Informatively referenced by — RFC 9496: The ristretto255 and decaf448 Groups
Informatively referenced by — RFC 9202: Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE)
Informatively referenced by — RFC 9458: Oblivious HTTP
Informatively referenced by — RFC 9497: Oblivious Pseudorandom Functions (OPRFs) Using Prime-Order Groups
Informatively referenced by — RFC 8387: Practical Considerations and Implementation Experiences in Securing Smart Object Networks
Informatively referenced by — RFC 9142: Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH)
Informatively referenced by — RFC 9148: EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol
Informatively referenced by — RFC 9278: JWK Thumbprint URI
Informatively referenced by — RFC 9591: The Flexible Round-Optimized Schnorr Threshold (FROST) Protocol for Two-Round Schnorr Signatures
Informatively referenced by — RFC 9807: The OPAQUE Augmented Password-Authenticated Key Exchange (aPAKE) Protocol