ISO/IEC 15946-1:2016

Overview

ISO/IEC 15946-1:2016 - “Information technology - Security techniques - Cryptographic techniques based on elliptic curves - Part 1: General” - provides the mathematical foundation and general techniques for implementing elliptic curve cryptography (ECC). It documents the conventions, symbols and background needed to support ECC mechanisms (for example, key-exchange, key‑transport and digital signatures) referenced by other ISO/IEC standards. The standard describes finite-field and elliptic-curve conventions, conversion functions, domain-parameter concepts and key-generation guidance, but it intentionally does not prescribe low-level implementation details (e.g., basis representations), so it does not by itself guarantee interoperability.

Key topics and technical requirements

• Mathematical background
  • Finite fields (prime fields F(p) and extension fields F(pm)), algebraic definitions and conventions.
  • Formal definition of elliptic curves over finite fields and the group law used for ECC.
• Symbols and terminology
  • Standardized notation for points, group order, base point G, cofactor h, torsion groups, etc.
• Conversion functions
  • Definitions and usage of common conversion primitives such as OS2IP / I2OSP, OS2FEP / FE2OSP, EC2OSP / OS2ECP and related point compression/decompression rules.
• Elliptic-curve domain parameters and key generation
  • Structure and required elements of ECC domain parameters (curve coefficients, field, base point, order, cofactor) and general key generation procedures.
• Cryptographic bilinear maps
  • Definitions and properties (non-degeneracy, bilinearity, computability) where relevant to pairing-based constructions.
• Informative annexes
  • Background material on finite fields, elliptic curves, ECC systems and coordinate systems to aid implementers and reviewers.
• Intellectual property notice
  • The document draws attention to potential patent claims and lists known patent holders; users are advised to consult ISO/IEC patent databases.

Practical applications and intended users

ISO/IEC 15946-1 is aimed at professionals who design, implement or evaluate cryptographic systems that use elliptic curves:

• Cryptographers and protocol designers specifying ECC-based key-exchange, signatures or key‑transport schemes.
• Software and hardware implementers (TLS libraries, smart cards, secure elements, IoT device firmware) needing standardized mathematical and conversion conventions.
• Security architects and compliance teams assessing ECC implementations and interoperability vs. other ISO/IEC parts.
• Test labs and certification bodies reviewing ECC conformance and correctness of mathematical operations.

While this part supplies essential definitions and techniques, implementers should pair it with implementation-focused parts (e.g., ISO/IEC 15946-5 for curve generation) and consider interoperability, performance and patent/licensing implications.

Related standards

• ISO/IEC 15946-5 (Elliptic curve generation)
• ISO/IEC 9796-3, 11770-3, 14888-3, 18033-2 (standards that reference ECC mechanisms supported by ISO/IEC 15946-1)