The point at infinity is an invented point, usually written O, that makes elliptic-curve addition work in special cases. It acts like zero: O + O = O, and P + O = P for every point P on the curve. section 5.3.1
Geometrically, it appears when the line or tangent used for addition does not meet the curve at another ordinary point, including cases where two points cancel. Adding it completes the group structure used by elliptic-curve cryptography. section 5.3.1
Figure 5.10 Building on figure 5.9, addition on an elliptic curve is also defined when adding a point to itself or when two points cancel each other to result in the point at infinity (O).
Use the figure to see point doubling and cancellation cases that produce O. section 5.3.1
In elliptic-curve key exchanges, O also matters as a validation check:
- Reject a received public key if it is the point at infinity. section 5.4
- Check that the received coordinates describe a point on the defined curve before scalar multiplication. section 5.4


