In cryptography, Curve448 or Curve448-Goldilocks is an elliptic curve potentially offering 224 bits of security and designed for use with the elliptic-curve Diffie–Hellman (ECDH) key agreement scheme.

2022年3月9日 · Curve448 提供 222.8 位的安全强度。 Curve448 的私钥为 446 位，通常编码为 448 位整数（56 个字节，112 个十六进制数字）。 公钥也被编码为 448 位整数。 基于 Curve448 派生出了名为 X448 的 ECDH 算法，以及基于 EdDSA 的高速数字签名算法 Ed448. 该选择哪种椭 …

Edwards25519 is designed to make the cost of a discrete log computation cost at least about 2128 2 128 bit operations to break the first of any number of targets. Edwards448, also known …

Here I report on the design of another strong curve, called Ed448-Goldilocks. Implementa-tions of this curve can perform very well for its security level on many architectures. As of this writing, this curve is favored by IRTF CFRG for inclusion in future versions of TLS along with Curve25519.

Ed25519使用SHA-512作为内部哈希函数，而Ed448使用来自SHA-3家族的SHAKE256 (如果使用预哈希版本，同样适用)。 内部哈希函数的输入在Ed25519中处理不同:如果不使用预哈希版本，则是消息本身；否则，消息 (实际上是哈希)以域分离字符串作为前缀。

ED448的 密钥长度为456位，提供了228位的安全性。 ED448同样可以用于生成密钥对、进行数字签名和验证签名，但相比于ED25519，ED448提供了更高的安全强度。

Digital Signature Algorithm (EdDSA) is described along with a recommendation for the use of the curve25519 and curve448. EdDSA has defined two modes: the PureEdDSA mode without prehashing and the HashEdDSA mode with prehashing. The convention used for identifying the algorithm/curve combinations is to use "Ed25519" and "Ed448" for the PureEdDSA ...

Ed448:是edwards448上的数字签名算法。 X448:是为Curve448构建的Diffie-Hellman函数.Curve448:是RFC7748中指定的蒙哥马利格式的椭圆曲线。

2015年6月30日 · Here I report on the design of another strong curve, called Ed448-Goldilocks. Implementations of this curve can perform very well for its security level on many architectures.

2020年6月16日 · wolfSSL 4.4.0 introduces new high security elliptic curve algorithms: X448 and Ed448. These algorithms are specified for TLS – RFC 8446 and RFC 8442 – and in NIST drafts FIPS 186-5 and SP 800-186. These high security algorithms are not only fast but also small – 10KB for the optimised X448 C code on Intel x64! And it’s faster than OpenSSL: