{
  "number": 9496,
  "title": "The ristretto255 and decaf448 Groups",
  "authors": [
    "H. de Valence",
    "J. Grigg",
    "M. Hamburg",
    "I. Lovecruft",
    "G. Tankersley",
    "F. Valsorda"
  ],
  "published": "2023-12",
  "status": "Informational",
  "stream": "IRTF",
  "pages": 27,
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "abstract": "This memo specifies two prime-order groups, ristretto255 and decaf448, suitable for safely implementing higher-level and complex cryptographic protocols. The ristretto255 group can be implemented using Curve25519, allowing existing Curve25519 implementations to be reused and extended to provide a prime-order group. Likewise, the decaf448 group can be implemented using edwards448.\n\nThis document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.",
  "keywords": [
    "cryptographic group",
    "cryptography",
    "Curve25519",
    "ecc",
    "edwards448",
    "elliptic curve",
    "elliptic curve cryptography",
    "nonmalleable encodings",
    "prime-order",
    "prime order"
  ],
  "draft": "draft-irtf-cfrg-ristretto255-decaf448-08",
  "doi": "10.17487/RFC9496",
  "urls": {
    "html": "https://rfc.dk/rfc9496/",
    "text": "https://rfc.dk/rfc9496.txt",
    "rfc_editor": "https://www.rfc-editor.org/rfc/rfc9496",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9496/"
  },
  "text_modified": "2023-12-22T17:48:38.226500287Z"
}