Questions tagged [curve25519]

One of the fastest ECC curves, and being used by Monero. It offers 128 bits of security and designed for use with the elliptic curve Diffie–Hellman (ECDH) key agreement scheme.

Filter by
Sorted by
Tagged with
5 votes
2 answers
567 views

Curve used in Monero - A Subgroup of Ed25519?

I am a student researcher at IIT Bombay (India). I have been recently understanding the cryptography behind Monero as well as its implementation. The elliptic curve used in the CryptoNote protocol is ...
user avatar
3 votes
1 answer
81 views

ed25519 point structs

What do each of these structs represent? What is the difference between them? typedef struct { fe X; fe Y; fe Z; } ge_p2; typedef struct { fe X; fe Y; fe Z; fe T; } ge_p3; typedef ...
user avatar
  • 59
2 votes
1 answer
418 views

How to convert monero's curve25519 basepoint to bouncycastle

This is how to get the curve25519 basepoint in monero (use js console at https://xmr.llcoins.net/) > var identity = "0100000000000000000000000000000000000000000000000000000000000000" > var base ...
user avatar
5 votes
1 answer
593 views

Where does Curve25519's limit occur?

While informing myself on the inner-working of Monero, I stumbled on Curve25519. The CryptoNote White Paper states: l: a prime order of the base point; l = 2^252 + ...
user avatar
  • 577
5 votes
1 answer
647 views

What is elliptic curve cryptography and why is it important to Monero?

What is elliptic curve cryptography and why is it important to Monero? Please provide both a basic description and an in depth description of the type found on Moneropedia
user avatar
  • 1,010
10 votes
1 answer
263 views

How to see that the RingCT commitment parameter H is in fact a multiple of the base point G

On the last paragraph of page 7 of Monero Research Lab's paper about RingCT, the author makes some statements to the effect that it is possible to pick a random point on the base curve ED25519 that is ...
user avatar
  • 3,327
10 votes
1 answer
2k views

Comparison of Curve25519 with secp256k1?

How does the security of Curve25519 compare with secp256k1? Is it known why the creators of CryptoNote may have chosen one curve over the other?
user avatar
  • 808
8 votes
2 answers
143 views

What level of cryptographic review has the current Monero protocol received?

What are the backgrounds of the members of the Monero Research Lab? What amount of known peer review have their publications received? Independent of Monero itself, how much Cryptographic review has ...
user avatar
  • 1,428