TOPICS
Search

Twisted Edwards Curve


A twisted Edwards curve over a field K of field characteristic other than 2 is the affine plane curve

 ax^2+y^2=1+dx^2y^2,
(1)

where a,d in K and ad(a-d)!=0. The special case a=1 is an Edwards curve, whose underlying elliptic curve normal form was introduced by Edwards (2007). Bernstein et al. (2008) generalized it by allowing the coefficient a not to be fixed to 1, giving the twisted Edwards curves above. For points P_1=(x_1,y_1) and P_2=(x_2,y_2), the elliptic curve group law is P_1+P_2=(x_3,y_3), where

x_3=(x_1y_2+y_1x_2)/(1+dx_1x_2y_1y_2)
(2)
y_3=(y_1y_2-ax_1x_2)/(1-dx_1x_2y_1y_2).
(3)

The identity element is (0,1), and the inverse element of (x,y) is (-x,y). When a is a square and d is a nonsquare in K, the addition formulas are complete (Bernstein et al. 2008).


See also

Edwards Curve, Elliptic Curve, Elliptic Curve Group Law

Explore with Wolfram|Alpha

References

Bernstein, D. J.; Birkner, P.; Joye, M.; Lange, T.; and Peters, C. "Twisted Edwards Curves." In Progress in Cryptology-AFRICACRYPT 2008 (Ed. S. Vaudenay). Lecture Notes in Computer Science, Vol. 5023. Berlin, Germany: Springer, pp. 389-405, 2008. https://doi.org/10.1007/978-3-540-68164-9_26.Edwards, H. M. "A Normal Form for Elliptic Curves." Bull. Amer. Math. Soc. 44, 393-422, 2007. https://doi.org/10.1090/S0273-0979-07-01153-6.

Cite this as:

Weisstein, Eric W. "Twisted Edwards Curve." From MathWorld--A Wolfram Resource. https://mathworld.wolfram.com/TwistedEdwardsCurve.html

Subject classifications