spdx / spdx/cryptographic-algorithm-list

New property: eliptic curve

Open
#21 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
No language data
Stars
8
Forks
4
PR merge metrics
No merged PRs in 30d

Description

Background

An elliptic curve in cryptographic contexts refers to a mathematical curve defined by an equation of the form y² = x³ + ax + b over a finite field, where the curve satisfies certain non-singularity conditions. In cryptography, elliptic curves serve as the mathematical foundation for elliptic curve cryptography (ECC), providing a group structure that enables secure cryptographic operations.

Elliptic curve cryptographic algorithms exploit the difficulty of the elliptic curve discrete logarithm problem (ECDLP) to provide security. Given a point P on an elliptic curve and another point Q = kP (where k is a scalar and kP represents scalar multiplication), it is computationally infeasible to determine k when the curve parameters are properly chosen.

Elliptic curves in cryptography are defined over finite fields, meaning all coordinates x,y belong to a limited set of integers, ensuring both security and efficient implementation.

Elliptic curve-based algorithms offer equivalent security to traditional public-key cryptographic methods while using significantly smaller key sizes. For example, a 256-bit elliptic curve key provides comparable security to a 3072-bit RSA key. This efficiency makes elliptic curve algorithms particularly valuable in resource-constrained environments and modern cryptographic applications.

Common standardized elliptic curves include those specified in NIST FIPS 186-4 (such as P-256, P-384, P-521), Curve25519, and secp256k1, among others.

Rationale

Description

Actions

  • Should we include the property eliptic curve in the list, and its attributes/fields?. Discussion

DoD

  • Link to the MoMs where the topic has been discussed.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source files, tests, or entry points are named. Start by reviewing the elliptic-curve background and determining whether the property belongs in the list, including its attributes and fields. Done requires a decision and links to the meeting minutes where the topic was discussed.

Written by the indexing model from the issue text.

Assessment

Domain
cryptography
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.