Document Type Expired Internet-Draft (individual)
Authors Watson Ladd  , Patrick Longa  , Richard Barnes 
Last updated 2017-09-28 (latest revision 2017-03-27)
Stream (None)
Intended RFC status (None)
Expired & archived
pdf htmlized (tools) htmlized bibtex
Stream Stream state (No stream defined)
Consensus Boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


This document specifies Curve4Q, a twisted Edwards curve proposed in [Curve4Q] that takes advantage of arithmetic over the field GF(2^127-1) and two endomorphisms to achieve the speediest Diffie- Hellman key agreements over a group of order approximately 2^246, which provides around 128 bits of security. Curve4Q implementations are more than two times faster than those of Curve25519 and, when not using endomorphisms, are between 1.2 and 1.6 times faster.


Watson Ladd (
Patrick Longa (
Richard Barnes (

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)