Home > Resources > papers > AFG24-Pairing-Curves-192

A Short-List of Pairing-Friendly Curves Resistant to the Special TNFS Algorithm at the 192-bit Security Level (Aranha, Fotiadis, Guillevic 2024)

Last modified: 2026-10-27

DOI: 10.62056/angyl86bm · URL: https://doi.org/10.62056/angyl86bm

Summary

Re-evaluates pairing-friendly curve families against the special tower number field sieve attack and recommends curves for 192-bit security, with BLS24-509 as the most efficient choice (IACR Communications in Cryptology 2024). BL26-SoK-AnonCreds cites it in its discussion of pairing curves for BBS credentials: BLS12-381 is the de-facto 128-bit choice, but it still lacks a formal standard.

Related resources

• Short Group Signatures (Boneh, Boyen, Shacham 2004) (paper, 2004)
• Short Signatures from the Weil Pairing (Boneh, Lynn, Shacham 2001) (paper, 2001)
• SoK: Anonymous Credentials for Digital Identity Wallets (Bormann, Lehmann 2026) (paper, 2026)