Expand description
This module implements the BW6_767 curve generated by [El Housni and Guillevic], using their generic approach described in [HG21]. The name denotes that it is a curve generated using the Brezing–Weng method, and that its embedding degree is 6. The main feature of this curve is that the scalar field equals the base field of the BLS12_381 curve.
Curve information:
- Base field: q = 496597749679620867773432037469214230242402307330180853437434581099336634619713640485778675608223760166307530047354464605410050411581079376994803852937842168733702867087556948851016246640584660942486895230518034810309227309966899431
- Scalar field: r = 4002409555221667393417789825735904156556882819939007885332058136124031650490837864442687629129015664037894272559787
- valuation(q - 1, 2) = 1
- valuation(r - 1, 2) = 1
G1 curve equation: y^2 = x^3 + Ax + B, where
- A = 0,
- B = 1
G2 curve equation: y^2 = x^3 + Ax + B, where
- A = 0
- B = 3