# do255e

The curve do255e is a GLV curve, i.e. with equation $$y^2 = x(x^2 + b)$$. We apply the following criteria:

• Modulus $$q = 2^{255} - m$$ should be equal to 5 modulo 8. For the GLV curve not to be supersingular, we need $$q$$ to be equal to 1 or 5 modulo 8; the second choice makes computation of square roots in the field easier to implement.

• Since the $$j$$-invariant of such a curve is fixed (it's 1728), there are only two potential curves (up to isomorphisms) to check for a given field. We can thus always enforce that $$b = 2$$ or $$-2$$, which are convenient values for implementation.

• Curve order must be equal to $$2r$$ for a prime integer $$r$$.

Under these criteria, the first match is for $$m = 18651$$. Here are the resulting curve parameters:

• Name: do255e
• Field: integers modulo $$q = 2^{255} - 18651$$
• Equation: $$y^2 = x(x^2 - 2)$$
• Order: $$2r$$, with $$r = 2^{254} - 131528281291764213006042413802501683931$$
• Generator: $\begin{eqnarray*} G_x &=& 2 \\ G_y &=& 2 \end{eqnarray*}$