Missing elliptic curves

[tarcieri]

This is a tracking issue for additional elliptic curves we could potentially implement.

Note that we are presently focusing on short Weierstrass curves which can be implemented using the primeorder crate. There are many other Rust projects implementing newer curve forms, such as bls12_381, curve25519-dalek and ed448-goldilocks.

• [ ] Brainpool P-224 (brainpoolP224r1, brainpoolP224t1)
• [x] Brainpool P-256 (brainpoolP256r1, brainpoolP256t1)
• [ ] Brainpool P-320 (brainpoolP320r1, brainpoolP320t1)
• [x] Brainpool P-384 (brainpoolP384r1, brainpoolP384t1)
• [ ] Brainpool P-512 (brainpoolP512r1, brainpoolP512t1)
• [x] NIST P-192 (secp192r1)
• [x] NIST P-224 (secp224r1)
• [x] NIST P-521 (secp521r1)
• [ ] GOST 34.10-2018
• [ ] secp224k1
• [x] SM2

[tarcieri]

We could potentially inquire on the upstream repo: https://github.com/crate-crypto/Ed448-Goldilocks

[Dustin-Ray]

We could potentially inquire on the upstream repo: https://github.com/crate-crypto/Ed448-Goldilocks

sounds like the authors might be interested: https://github.com/crate-crypto/Ed448-Goldilocks/issues/35

[kayabaNerve]

secq256k1? Should be trivial given the secp256k1 code present.

[Fethbita]

Hi, I haven't seen brainpoolP224r1, brainpoolP320r1 and brainpoolP512r1 mentioned here. Specifically, I need the brainpoolP512r1 as it is already used in the wild in the electronic passport ecosystem. See CSCA Master List issued by BSI: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/ElekAusweise/CSCA/GermanMasterList.html

The Master List Signer Certificate and the German CSCA certificate uses brainpoolP512r1. Would it be possible to add these curves in the roadmap as well?

Curve parameters for these curves can be found at: https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TR03111/BSI-TR-03111_V-2-0_pdf.pdf?__blob=publicationFile&v=1