How were Monero elliptic curve constants chosen?

Question

In the cryptonote paper review, there was a mention about not knowing how the constants were calculated, is there anyway to verify these constants are 'safe' or change them to something 'better'? please enlighten me :DD

score 6 · Accepted Answer · answered Dec 02 '16 at 14:58

6

Although it wasn't clear to the reviewers at the time, the constants are standard ed25519 constants from DJB et al. You can read about it here, especially section "Choice of curve" starting on the bottom of page 7.

answered Dec 02 '16 at 14:58

Luigi

2,472
12
14

How were Monero elliptic curve constants chosen?

1 Answers1