Pure Rust implementation of the secp256k1 (K-256) elliptic curve, including support for the Elliptic Curve Digital Signature Algorithm (ECDSA), Elliptic Curve Diffie-Hellman (ECDH), and general purpose elliptic curve/field arithmetic which can be used to implement protocols based on group operations.
About secp256k1 (K-256)
secp256k1 is a Koblitz curve commonly used in cryptocurrency applications. The "K-256" name follows NIST notation where P = prime fields, B = binary fields, and K = Koblitz curves (defined over F₂).
The curve is specified as
secp256k1 by Certicom's SECG in
"SEC 2: Recommended Elliptic Curve Domain Parameters":
⚠️ Security Warning
The elliptic curve arithmetic contained in this crate has never been independently audited!
This crate has been designed with the goal of ensuring that secret-dependent
operations are performed in constant time (using the
subtle crate and
constant-time formulas). However, it has not been thoroughly assessed to ensure
that generated assembly is constant time on common CPU architectures.
USE AT YOUR OWN RISK!
Minimum Supported Rust Version
Rust 1.44 or higher.
Minimum supported Rust version can be changed in the future, but it will be done with a minor version bump.
Elliptic Curve Diffie-Hellman (Ephemeral) Support.
Elliptic Curve Digital Signature Algorithm (ECDSA).
A point on the secp256k1 curve in affine coordinates.
A point on the secp256k1 curve in projective coordinates.
An element in the finite field modulo curve order.
K-256 (secp256k1) elliptic curve.
Compressed SEC1-encoded secp256k1 (K-256) point (i.e. public key)
SEC1-encoded secp256k1 (K-256) curve point.
secp256k1 (K-256) field element serialized as bytes.
Non-zero scalar value.
secp256k1 field element serialized as bits.
Bytes containing a secp256k1 secret scalar
secp256k1 (K-256) secret key.