Edwards normal form
From Elliptic Curve Crypto
An elliptic curve is in Edwards normal form[1] if it can be described by the equation
- Failed to parse (SVG (MathML can be enabled via browser plugin): Invalid response ("Math extension cannot connect to Restbase.") from server "https://wikimedia.org/api/rest_v1/":): {\displaystyle x^2 + y^2 = 1 + dx^2y^2}
The more general original Edwards form has another parameter c
but it is very simple to eliminate the scale parameter c and reduce this equation to its normal form for ease of performing algebraic group operations on rational points or finite fields.
The twist
There is also a “twisted” Edwards form
- Failed to parse (SVG (MathML can be enabled via browser plugin): Invalid response ("Math extension cannot connect to Restbase.") from server "https://wikimedia.org/api/rest_v1/":): {\displaystyle ax^2 + y^2 = 1 + dx^2y^2}
And this brings us back to the ancient Greek word στραγγός with the idea of using something “twisted” for strong cryptography.
- ↑ Harold M. Edwards. “A normal form for elliptic curves.” Bulletin of the American Mathematical Society, vol. 44, no. 3, Jul 2007, pp. 393–422. https://www.ams.org/journals/bull/2007-44-03/S0273-0979-07-01153-6/
