D, bits in q, bits in r 283, 92, 73 443, 103, 89 947, 114, 114 1003, 291, 247 3139, 121, 69 3987, 103, 89 8499, 105, 105 8523, 114, 114 9563, 201, 181 9883, 142, 119 11387, 146, 115 11499, 85, 82 18467, 179, 155 19587, 124, 124 23563, 124, 106 25187, 124, 90 28251, 121, 69 34243, 92, 73 48747, 82, 72 53147, 137, 127 60859, 97, 97 62003, 159, 158 78459, 140, 110 83507, 85, 70 93259, 124, 124 105171, 196, 185 125499, 112, 73 128227, 80, 73 139051, 133, 130 140963, 437, 420 147883, 138, 125 173203, 145, 141 176283, 124, 124 178163, 97, 76 191963, 122, 121 205483, 252, 240 210747, 134, 131 238859, 407, 383 249563, 252, 234 257883, 82, 72 277699, 175, 167 278027, 190, 181 285707, 311, 289 290491, 114, 100 311387, 522, 514 313123, 463, 455 313851, 203, 200 351691, 88, 76 351707, 92, 58 366059, 155, 136 369947, 98, 74 374691, 97, 87 417227, 94, 72 462403, 117, 117 476971, 347, 332 478259, 89, 67 481843, 359, 356 496659, 224, 224 519243, 248, 224 525379, 84, 73 536707, 113, 109 545331, 83, 65 557611, 124, 121 583067, 177, 150 594739, 677, 650 609331, 107, 95 621771, 202, 193 658779, 199, 194 682627, 81, 68 684811, 126, 126 706131, 140, 110 735243, 104, 90 762779, 115, 81 798331, 95, 84 813443, 146, 125 840347, 175, 161 846203, 216, 179 848051, 148, 134 849683, 126, 116 851827, 120, 95 873867, 486, 442 885067, 135, 116 893651, 97, 85 926531, 125, 109 946539, 196, 185 972483, 1357, 1357 1000659, 98, 94 1010083, 80, 64 1042779, 89, 70 1045563, 121, 116 1047587, 119, 97 1060147, 203, 203 1084843, 190, 163 1130603, 88, 70 1190587, 162, 113 1202363, 153, 139 1219163, 92, 69 1229811, 133, 121 1256611, 85, 81 1317019, 106, 99 1333123, 136, 123 1353203, 82, 79 1363283, 83, 59 1374603, 123, 109 1410947, 165, 114 1430907, 135, 135 1433587, 96, 83 1455123, 87, 82 1457731, 91, 64 1475251, 313, 313 1479099, 102, 87 1518627, 144, 117 1535827, 375, 375 1540667, 92, 72 1541819, 90, 58 1573843, 111, 94 1575507, 202, 199 1586547, 124, 124
PBC Library
The Pairing-Based Cryptography Library
MNT Curves
The program listmnt searches for suitable discriminants that the MNT method can use to construct degree 6 curves that contain a subgroup of prime order.
The program gendparam can be used to generate actual curve parameters for a given D. Previously generated curve parameters for D < 1000000 are available.
Edited sample output of listmnt: