The ristretto255 and decaf448 Groups
Henry de Valence, Jack Grigg, M. Hamburg, Isis Lovecruft, George Tankersley, Filippo Valsorda · 2023
This memo specifies two prime-order groups, ristretto255 and decaf448, suitable for safely implementing higher-level and complex cryptographic protocols. The ristretto255 group can be implemented using Curve25519, allowing existing Curve25519 implementations to be reused and extended to provide a prime-order group. Likewise, the decaf448 group can be implemented using edwards448.