Pure Rust implementation of the secp256k1 (K-256) elliptic curve, including support for the Elliptic Curve Digital Signature Algorithm (ECDSA), Elliptic Curve Diffie-Hellman (ECDH), and general purpose elliptic curve/field arithmetic which can be used to implement protocols based on group operations.
secp256k1 is a Koblitz curve commonly used in cryptocurrency applications. The “K-256” name follows NIST notation where P = prime fields, B = binary fields, and K = Koblitz curves (defined over F₂).
The curve is specified as
secp256k1 by Certicom’s SECG in
“SEC 2: Recommended Elliptic Curve Domain Parameters”:
The elliptic curve arithmetic contained in this crate has never been independently audited!
This crate has been designed with the goal of ensuring that secret-dependent
operations are performed in constant time (using the
subtle crate and
constant-time formulas). However, it has not been thoroughly assessed to ensure
that generated assembly is constant time on common CPU architectures.
USE AT YOUR OWN RISK!
Rust 1.46 or higher.
Minimum supported Rust version may be changed in the future, but it will be accompanied with a minor version bump.
Elliptic Curve Diffie-Hellman (Ephemeral) Support.
Elliptic Curve Digital Signature Algorithm (ECDSA).
A point on the secp256k1 curve in affine coordinates.
A point on the secp256k1 curve in projective coordinates.
An element in the finite field modulo curve order.
K-256 (secp256k1) elliptic curve.
Compressed SEC1-encoded secp256k1 (K-256) point.
SEC1-encoded secp256k1 (K-256) curve point.
secp256k1 (K-256) field element serialized as bytes.
Non-zero scalar value.
secp256k1 (K-256) public key.
secp256k1 field element serialized as bits.
Bytes containing a secp256k1 secret scalar.
secp256k1 (K-256) secret key.