Curve25519-based schemes

E192664

Curve25519-based schemes are cryptographic protocols and algorithms that use the Curve25519 elliptic curve to provide efficient, high-security public-key operations such as key exchange and digital signatures.

All labels observed (12)

How this entity was disambiguated

Statements (52)

Predicate Object
instanceOf cryptographic scheme family
public-key cryptography
advantage fast key agreement
fast key generation
fast signature verification
good performance on constrained devices
small key sizes compared to RSA
avoids branch-based side channels (in well-written implementations)
timing side channels (in well-written implementations)
basedOn elliptic-curve cryptography
commonlyUsedIn SSH implementations
TLS implementations
VPN protocols
end-to-end encrypted storage systems
secure messaging applications
coordinateSystem Montgomery form
designedFor high performance
side-channel resistance
field prime field GF(2^255-19)
keyExchangeVariant X25519
property cofactor 8
constant-time scalar multiplication implementations
rigidly defined curve parameters
twist security
provides digital signatures
key exchange
public-key encryption
securityAssumption elliptic-curve discrete logarithm problem
securityLevel approximately 128-bit security
signatureVariant Ed25519
Ed25519ctx
Ed25519ph
standardizedIn Noise Protocol Framework specification
OpenSSH protocol extensions
linked to: OpenSSH

RFC 7748
RFC 8032
TLS 1.3 (RFC 8446)
linked to: RFC 8446
supportsProtocol ECIES over Curve25519
Ed25519
Noise protocol framework handshakes
SSH X25519 key exchange
Signal protocol Double Ratchet
Signal protocol X3DH
TLS 1.3 X25519 key exchange
VXEdDSA
linked to: EdDSA

WireGuard key exchange
X25519
age file encryption format
typicalKeySize 256-bit public keys
typicalPrivateKeySize 256-bit private scalars with clamping
usesCurve Curve25519
usesScalarMultiplicationAlgorithm Montgomery ladder

How these facts were elicited

Referenced by (16)

Full triples — surface form annotated when it differs from this entity's canonical label.

Elliptic Curve Cryptography hasVariant Curve25519-based schemes
Daniel J. Bernstein notableWork Curve25519
linked to: Curve25519-based schemes
Daniel J. Bernstein notableWork NaCl cryptographic library
linked to: Curve25519-based schemes
Daniel J. Bernstein notableWork Curve25519-based Diffie–Hellman key exchange
linked to: Curve25519-based schemes
Simultaneous Authentication of Equals uses elliptic curve Diffie–Hellman
linked to: Curve25519-based schemes
libsodium implementsPrimitive Curve25519
linked to: Curve25519-based schemes
libsodium implementsPrimitive X25519
linked to: Curve25519-based schemes
ECC canBeUsedWith Elliptic Curve Diffie–Hellman
linked to: Curve25519-based schemes
ECC notableCurveFamilies Curve25519 family
linked to: Curve25519-based schemes
Curve25519-based schemes usesCurve Curve25519
linked to: Curve25519-based schemes
Curve25519-based schemes supportsProtocol ECIES over Curve25519
linked to: Curve25519-based schemes
Curve25519-based schemes supportsProtocol SSH X25519 key exchange
linked to: Curve25519-based schemes
Ed25519 usesCurve Curve25519
linked to: Curve25519-based schemes
WireGuard usesCryptography Curve25519
subject linked to: WireGuard VPN protocol
linked to: Curve25519-based schemes
Noise_XX pattern usedIn WireGuard design family of patterns
linked to: Curve25519-based schemes
CFRG standardized Curve25519 for key agreement
linked to: Curve25519-based schemes