+ gx 0x4912ad657f1d1c6b32edb9942c95e226b06fb012cd40fdea0d72197c8104
+ gy 0x01f1fbc3d21168fd3f66c441c2b5c6cfdcd9ed3e13646b7a4db9a3b0c286
+curve ansi-c2onb239v2 binnorm
+ p 0x800000000000000000000000000000000000000000000000001000000001
+ beta 0x3b5ce9846911b248f9347018a7ac8cce3662cee952ba45becd02d4b903ec
+ a 0x1ecf1b9d28d8017505e17475d3df2982e243ca5cb5e9f94a3f36124a486e
+ b 0x3ee257250d1a2e66cef23aa0f25b12388de8a10ff9554f90afbaa9a08b6d
+ r 0x1555555555555555555555555555558cf77a5d0589d2a9340d963b7ad703
+ h 6
+ gx 0x5f949ccb694f26b96d191e8925205a719929e93c37174cb6c7f659a37b85
+ gy 0x2d788d605ac81069e9964fd6edbae8bbf582a5c409a1078cf487a147ceb2
+ ## The spec seems bogus: the suggested base point G isn't in the
+ ## subgroup! The point above is h G.
+ ##gx 0x193279fc543e9f5f7119189785b9c60b249be4820baf6c24bdfa2813f8b8
+ ##gy 0x5da021e5af77604051fc5c38da8293c1eeeaa00f046eeb93b6c8b774bb9b
+
+curve ansi-c2tnb359v1 binpoly
+ p 0x800000000000000000000000000000000000000000000000000000000000000000000000100000000000000001
+ a 0x5667676a654b20754f356ea92017d946567c46675556f19556a04616b567d223a5e05656fb549016a96656a557
+ b 0x2472e2d0197c49363f1fe7f5b6db075d52b6947d135d8ca445805d39bc345626089687742b6329e70680231988
+ r 0x01af286bca1af286bca1af286bca1af286bca1af286bc9fb8f6b85c556892c20a7eb964fe7719e74f490758d3b
+ h 76
+ gx 0x3c258ef3047767e7ede0f1fdaa79daee3841366a132e163aced4ed2401df9c6bdcde98e8e707c07a2239b1b097
+ gy 0x53d7e08529547048121e9c95f3791dd804963948f34fae7bf44ea82365dc7868fe57e4ae2de211305a407104bd
+
+curve ansi-c2tnb431v1 binpoly
+ p 0x800000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000001
+ a 0x1a827ef00dd6fc0e234caf046c6a5d8a85395b236cc4ad2cf32a0cadbdc9ddf620b0eb9906d0957f6c6feacd615468df104de296cd8f
+ b 0x10d9b4a3d9047d8b154359abfb1b7f5485b04ceb868237ddc9deda982a679a5a919b626d4e50a8dd731b107a9962381fb5d807bf2618
+ r 0x000340340340340340340340340340340340340340340340340340340323c313fab50589703b5ec68d3587fec60d161cc149c1ad4a91
+ h 10080
+ gx 0x120fc05d3c67a99de161d2f4092622feca701be4f50f4758714e8a87bbf2a658ef8c21e7c5efe965361f6c2999c0c247b0dbd70ce6b7
+ gy 0x20d0af8903a96f8d5fa2c255745d3c451b302c9346d9b7e485e7bce41f6b591f3e8f6addcbb0bc4c2f947a7de1a89b625d6a598b3760
+
+# These curves aren't included because their degree isn't prime (so they
+# may be vulnerable to Weil descent)
+# ansi-c2pnb176w1 is bad: 176 isn't prime
+# ansi-c2pnb208v1 is bad: 208 isn't prime
+# ansi-c2pnb272w1 is bad: 272 isn't prime
+# ansi-c2pnb304w1 is bad: 304 isn't prime
+# ansi-c2pnb368w1 is bad: 368 isn't prime
+
+alias ansi-prime192v1 secp192r1
+curve ansi-prime192v2 niceprime
+ p 0xfffffffffffffffffffffffffffffffeffffffffffffffff
+ a 0xfffffffffffffffffffffffffffffffefffffffffffffffc
+ b 0xcc22d6dfb95c6b25e49c0d6364a4e5980c393aa21668d953
+ r 0xfffffffffffffffffffffffe5fb1a724dc80418648d8dd31
+ h 1
+ gx 0xeea2bae7e1497842f2de7769cfe9c989c072ad696f48034a
+ gy 0x6574d11d69b6ec7a672bb82a083df2f2b0847de970b2de15
+curve ansi-prime192v3 niceprime
+ p 0xfffffffffffffffffffffffffffffffeffffffffffffffff
+ a 0xfffffffffffffffffffffffffffffffefffffffffffffffc
+ b 0x22123dc2395a05caa7423daeccc94760a7d462256bd56916
+ r 0xffffffffffffffffffffffff7a62d031c83f4294f640ec13
+ h 1
+ gx 0x7d29778100c65a1da1783716588dce2b8b4aee8e228f1896
+ gy 0x38a90f22637337334b49dcb66a6dc8f9978aca7648a943b0
+
+curve ansi-prime239v1 niceprime
+ p 0x7fffffffffffffffffffffff7fffffffffff8000000000007fffffffffff
+ a 0x7fffffffffffffffffffffff7fffffffffff8000000000007ffffffffffc
+ b 0x6b016c3bdcf18941d0d654921475ca71a9db2fb27d1d37796185c2942c0a
+ r 0x7fffffffffffffffffffffff7fffff9e5e9a9f5d9071fbd1522688909d0b
+ h 1
+ gx 0x0ffa963cdca8816ccc33b8642bedf905c3d358573d3f27fbbd3b3cb9aaaf
+ gy 0x7debe8e4e90a5dae6e4054ca530ba04654b36818ce226b39fccb7b02f1ae
+curve ansi-prime239v2 niceprime
+ p 0x7fffffffffffffffffffffff7fffffffffff8000000000007fffffffffff
+ a 0x7fffffffffffffffffffffff7fffffffffff8000000000007ffffffffffc
+ b 0x617fab6832576cbbfed50d99f0249c3fee58b94ba0038c7ae84c8c832f2c
+ r 0x7fffffffffffffffffffffff800000cfa7e8594377d414c03821bc582063
+ h 1
+ gx 0x38af09d98727705120c921bb5e9e26296a3cdcf2f35757a0eafd87b830e7
+ gy 0x5b0125e4dbea0ec7206da0fc01d9b081329fb555de6ef460237dff8be4ba
+curve ansi-prime239v3 niceprime
+ p 0x7fffffffffffffffffffffff7fffffffffff8000000000007fffffffffff
+ a 0x7fffffffffffffffffffffff7fffffffffff8000000000007ffffffffffc
+ b 0x255705fa2a306654b1f4cb03d6a750a30c250102d4988717d9ba15ab6d3e
+ r 0x7fffffffffffffffffffffff7fffff975deb41b3a6057c3c432146526551
+ h 1
+ gx 0x6768ae8e18bb92cfcf005c949aa2c6d94853d0e660bbf854b1c9505fe95a
+ gy 0x1607e6898f390c06bc1d552bad226f3b6fcfe48b6e818499af18e3ed6cf3
+
+alias ansi-prime256v1 secp256r1
+
+#----- Curves from ANSI X9.63 -----------------------------------------------
+#
+# These are just duplicates of the SEC curves.
+
+alias ansit163k1 sect163k1
+alias ansit163r1 sect163r1
+alias ansit163r2 sect163r2
+alias ansit193r1 sect193r1
+alias ansit193r2 sect193r2
+alias ansit233k1 sect233k1
+alias ansit233r1 sect233r1
+alias ansit239k1 sect239k1
+alias ansit283k1 sect283k1
+alias ansit283r1 sect283r1
+alias ansit409k1 sect409k1
+alias ansit409r1 sect409r1
+alias ansit571k1 sect571k1
+alias ansit571r1 sect571r1
+
+alias ansip160k1 secp160k1
+alias ansip160r1 secp160r1
+alias ansip160r2 secp160r2
+alias ansip192k1 secp192k1
+alias ansip192r1 secp192r1
+alias ansip224k1 secp224k1
+alias ansip224r1 secp224r1
+alias ansip256k1 secp256k1
+alias ansip256r1 secp256r1
+alias ansip384r1 secp384r1
+alias ansip521r1 secp521r1
+
+#----- Curves from RFC2414 (Oakley) -----------------------------------------
+#
+# The Oakley curves are not good:
+# oakley155 has too large a cofactor
+# oakley185's field has composite degree
+# Hence, we include neither here.