Pure Rust implementation of the NIST P-256 elliptic curve, including support for the Elliptic Curve Digital Signature Algorithm (ECDSA), Elliptic Curve Diffie-Hellman (ECDH), and general purpose elliptic curve/field arithmetic which can be used to implement protocols based on group operations.
NIST P-256 is a Weierstrass curve specified in FIPS 186-4: Digital Signature Standard (DSS):
Also known as
prime256v1 (ANSI X9.62) and
secp256r1 (SECG), P-256 is
included in the US National Security Agency’s “Suite B” and is widely used
in Internet and connected device protocols like TLS, the X.509 PKI, and
The elliptic curve arithmetic contained in this crate has never been independently audited!
This crate has been designed with the goal of ensuring that secret-dependent
operations are performed in constant time (using the
subtle crate and
constant-time formulas). However, it has not been thoroughly assessed to ensure
that generated assembly is constant time on common CPU architectures.
USE AT YOUR OWN RISK!
Rust 1.47 or higher.
Minimum supported Rust version may be changed in the future, but it will be accompanied with a minor version bump.
Elliptic Curve Diffie-Hellman (Ephemeral) Support.
Elliptic Curve Digital Signature Algorithm (ECDSA)
secp256r1 test vectors.
A point on the secp256r1 curve in affine coordinates.
Scalar blinded with a randomly generated masking value.
NIST P-256 elliptic curve.
A point on the secp256r1 curve in projective coordinates.
Scalars are elements in the finite field modulo n.
Compressed SEC1-encoded NIST P-256 curve point.
NIST P-256 SEC1 encoded point.
NIST P-256 field element serialized as bytes.
Non-zero NIST P-256 scalar field element.
NIST P-256 public key.
Bit representation of a NIST P-256 scalar field element.
Scalar bytes: wrapper for
NIST P-256 secret key.
256-bit unsigned big integer