Overview
ISO/IEC 15946-1:2016 - “Information technology - Security techniques - Cryptographic techniques based on elliptic curves - Part 1: General” - provides the mathematical foundation and general techniques for implementing elliptic curve cryptography (ECC). It documents the conventions, symbols and background needed to support ECC mechanisms (for example, key-exchange, key‑transport and digital signatures) referenced by other ISO/IEC standards. The standard describes finite-field and elliptic-curve conventions, conversion functions, domain-parameter concepts and key-generation guidance, but it intentionally does not prescribe low-level implementation details (e.g., basis representations), so it does not by itself guarantee interoperability.
Key topics and technical requirements
- Mathematical background
- Finite fields (prime fields F(p) and extension fields F(pm)), algebraic definitions and conventions.
- Formal definition of elliptic curves over finite fields and the group law used for ECC.
- Symbols and terminology
- Standardized notation for points, group order, base point G, cofactor h, torsion groups, etc.
- Conversion functions
- Definitions and usage of common conversion primitives such as OS2IP / I2OSP, OS2FEP / FE2OSP, EC2OSP / OS2ECP and related point compression/decompression rules.
- Elliptic-curve domain parameters and key generation
- Structure and required elements of ECC domain parameters (curve coefficients, field, base point, order, cofactor) and general key generation procedures.
- Cryptographic bilinear maps
- Definitions and properties (non-degeneracy, bilinearity, computability) where relevant to pairing-based constructions.
- Informative annexes
- Background material on finite fields, elliptic curves, ECC systems and coordinate systems to aid implementers and reviewers.
- Intellectual property notice
- The document draws attention to potential patent claims and lists known patent holders; users are advised to consult ISO/IEC patent databases.
Practical applications and intended users
ISO/IEC 15946-1 is aimed at professionals who design, implement or evaluate cryptographic systems that use elliptic curves:
- Cryptographers and protocol designers specifying ECC-based key-exchange, signatures or key‑transport schemes.
- Software and hardware implementers (TLS libraries, smart cards, secure elements, IoT device firmware) needing standardized mathematical and conversion conventions.
- Security architects and compliance teams assessing ECC implementations and interoperability vs. other ISO/IEC parts.
- Test labs and certification bodies reviewing ECC conformance and correctness of mathematical operations.
While this part supplies essential definitions and techniques, implementers should pair it with implementation-focused parts (e.g., ISO/IEC 15946-5 for curve generation) and consider interoperability, performance and patent/licensing implications.
Related standards