In cryptography, Curve448 or Curve448-Goldilocks is an elliptic curve potentially offering 224 bits of security and designed for use with the elliptic-curve Diffie–Hellman (ECDH) key agreement scheme.

Value of context is set by signer and verifier (maximum of 255 octets; the default is empty string) and has to match octet by octet for verification to be successful. The curve is equivalent to Ed448-Goldilocks under change of the basepoint, which preserves difficulty of the discrete logarithm.

2022年3月9日 · EdDSA（Edwards-curve Digital Signature Algorithm）是一种现代的安全数字签名算法，它使用专为性能优化的椭圆曲线，如 255bits 曲线 edwards25519 和 448bits 曲线 edwards448. EdDSA 签名算法及其变体 Ed25519 和 Ed448 在技术上在RFC8032 中进行了描述。

2019年2月20日 · Edwards448, also known as Ed448-Goldilocks, is the untwisted Edwards curve $$x^2 + y^2 = 1 - 39081 x^2 y^2$$ over the prime field $\mathbb F_p$ where $p = 2^{448} - 2^{224} - 1$.

I propose Ed448-Goldilocks as a single high-strength curve for new designs. It is tempting to suggest a 384- and a 521-bit curve to match the existing NIST and Brainpool sizes. But there is really no need to have an \overkill" curve and a \more overkill" curve: users will just use one and not the other. 3 Field choice

Ed448-Goldilocks is a new elliptic curve for cryptography. Specifically, it is the curve: y 2 + x 2 ≡ 1 - 39081 x 2 y 2 (mod 2 448 - 2 224 - 1)

2023年8月2日 · 二、ED448. ED448也使用了Edwards-curve Digital Signature Algorithm (EdDSA)，但使用了更大的448位的椭圆曲线，也由Daniel J. Bernstein等人设计。 ED448的密钥长度为456位，提供了228位的安全性。

• Design a modern high-strength curve • Complete formulas, constant time • Better performance than NIST P-384, P-521 • One curve — no “overkill” and “more overkill” levels

Here I report on the design of another strong curve, called Ed448-Goldilocks. Implementations of this curve can perform very well for its security level on many architectures. As of this writing, this curve is favored by IRTF CFRG for inclusion in future versions of TLS along with Curve25519.

Ed448 or Curve448, also known as Curve448-Goldilocks, is an elliptic curve cryptography curve that provides a high level of security for key exchange and digital signatures. It is designed to be secure against a wide range of cryptographic attacks, including those …