# Elliptic Curve Cryptography

{% hint style="info" %}
The Baby-JubJub curve is explained in more detail in [*Ethereum Improvement Proposals*, no. 2494](https://eips.ethereum.org/EIPS/eip-2494).
{% endhint %}

The zkBob solution uses twisted Edwards elliptic curve Baby-JubJub with the following parameters:

**The curve equation:** $$a x^2 + y^2 = 1 + dx^2y^2$$

**Coefficient a:** 168700

**Coefficient d:** 168696

**The curve finite field modulus:** 21888242871839275222246405745257275088548364400416034343698204186575808495617

**The curve order:** 21888242871839275222246405745257275088614511777268538073601725287587578984328

**Subgroup cofactor:** 8

**Subgroup order:** 2736030358979909402780800718157159386076813972158567259200215660948447373041

**Generator point** $$(x, y)$$**:** 15432774951723927157031250336277790668279068029556328898354949310072202318295,  1094793399012674419577823790376044935246658671901627841542961578327961423020