"Elliptic curve 2y^2=x^3+x over field size 8^91+5", Daniel Brown
http://www.ietf.org/internet-drafts/draft-brown-ec-2y2-x3-x-mod-8-to-91-plus-5-06.txt
Multi-curve elliptic curve cryptography with curve 2y^2=x^3+x/GF(8^91+5) hedges a risk of new curve-specific attacks. This curve features: isomorphism to Miller's curve from 1985; low Kolmogorov complexity (little room for embedded weaknesses of Gordon, Young--Yung, or Teske); similarity to a Bitcoin curve; Montgomery form; complex multiplication by i (Gallant--Lambert--Vanstone); prime field; easy reduction, inversion, Legendre symbol, and square root; five 64-bit-word field arithmetic; string-as-point encoding; and 34-byte keys.2020-10-02T07:00:00-00:00