liveBook · Manning

P-256

As explained in Real-World Cryptography

P-256, also called secp256r1, is a standardized elliptic curve providing approximately 128 bits of security for elliptic-curve cryptography.

P-256, also called secp256r1, is a standardized elliptic curve widely used for internet cryptography. It commonly supports ECDH key exchange with approximately 128-bit security. section 5.3.3 section 5.5

Key points:

  • NIST FIPS 186-4 specifies P-256, while SEC 2 v2 specifies the same curve under the name secp256r1. section 5.3.3
  • Its short Weierstrass equation is y² = x³ + ax + b mod p, with a = −3 and standardized constants. section 5.3.3
  • ECDH implementations must verify received public keys; invalid keys are a recurring source of bugs. section 5.5

Choosing a curve for ECDH

For 128-bit security, ECDH commonly uses 256-bit parameters such as P-256 or Curve25519. Applications targeting 256-bit security can instead use P-521 or Curve448. section 5.5

How Real-World Cryptography covers it

How deep it goes
Defines the curve equation, parameters, point order, and base point without detailing implementation procedures.
Examples
Uses internet deployment, ECDH curve comparisons, and the standardized Weierstrass equation.
What you can do after
Evaluate/understand P-256’s names, standards, security level, and role in ECDH.
How it connects
Connects P-256 with ECDH, Curve25519, DH, P-521, Curve448, and ECDSA.

Also explained in

Compare how 3 books explain P-256 →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Real-World Cryptography. The section links point to the parts of the book it draws on.