Search RFCs

RFC Editor

File formats:

Also available:XML file for editing

 

Status:

INFORMATIONAL

Authors:

H. de Valence
J. Grigg
M. Hamburg
I. Lovecruft
G. Tankersley
F. Valsorda

Stream:

IRTF

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC9496

Discuss this RFC: Send questions or comments to the mailing listcfrg@irtf.org

Other actions:Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 9496

Abstract

This memo specifies two prime-order groups, ristretto255 anddecaf448, suitable for safely implementing higher-level and complexcryptographic protocols. The ristretto255 group can be implementedusing Curve25519, allowing existing Curve25519 implementations to bereused and extended to provide a prime-order group. Likewise, thedecaf448 group can be implemented using edwards448.

This document is a product of the Crypto Forum Research Group (CFRG)in the IRTF.

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.