rfc-9496

The ristretto255 and decaf448 Groups

H. de Valence, J. Grigg, M. Hamburg, I. Lovecruft, G. Tankersley, F. Valsorda

date2023-12 streamIRTF statusINFORMATIONAL pages27 canonicalhttps://www.rfc-editor.org/rfc/rfc9496 doi10.17487/RFC9496

This memo specifies two prime-order groups, ristretto255 and decaf448, suitable for safely implementing higher-level and complex cryptographic protocols. The ristretto255 group can be implemented using Curve25519, allowing existing Curve25519 implementations to be reused and extended to provide a prime-order group. Likewise, the decaf448 group can be implemented using edwards448. This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.