Are there any other implementations of curves in the Monero code (other than Curve25519)?

I'm asking because the code is very optimized to this curve (e.g. the multiplication in 8 when computing the stealthy address).

And, I'm trying to add some feature, but the field of the Edwards curve is not suitable for my needs.


  • 1
    If you can elaborate on why a Twisted Edwards curve would not be suitable for you, I can update my answer if necessary.
    – knaccc
    Commented Oct 3, 2018 at 14:33

1 Answer 1


There are two birationally equivalent variants of X25519, which are Curve25519 and Ed25519. Monero uses only Ed25519.

There might be performance reasons for using Curve25519 vs Ed25519 depending on whether you're doing variable base or double base scalar multiplication, but I can't think of a reason that Ed25519 would limit you functionally. Curves provide a trapdoor function, and you should be able to functionally achieve the same result with any curve.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.