Curves avoided for cryptography

Supersingular curves are to be avoided for cryptography because they are vulnerable to the MOV attack. (more about it later)

As with the supersingular curves, elliptic curves that are singular are to be avoided for cryptography .

Advertisements