<p>There often are multiple points which could be generators. In fact, for prime order curves, every point on the curve is a generator.</p>

<p>For practical use, a specific point is picked based on some constraints.</p>

<p>May curves use rules such as lowest <code>abs(x)</code> value or use some deterministic generator with a random seed.</p>

<p>I can't seem to find the login behind the G selection for secp256k1, however, but the point itself is defined in the curve specification.</p>

CC BY-SA 4.0
2018-08-10T12:58:01.083Z
Thanks for the answer. I am actually trying to understand elliptic curve cryptography, specifically how the signature is verified, shared secret generation and  the math behind it. I have gone through lot of information on internet, i am still not able to connect dots to fully understand it. can you help me?
Ishwar Chandra
CC BY-SA 4.0
2018-08-10T10:31:05.003Z
2018-08-10T10:31:05.003Z
Raghav Sood
<p>It's defined in the specification of the curve. In Bitcoin, the curve was SECP256k1 is chosen and the curve parameters are defined here: <a href="http://www.secg.org/SEC2-Ver-1.0.pdf" rel="nofollow noreferrer">SEC 2: Recommended Elliptic Curve Domain Parameters, Version 1.0</a></p>

CC BY-SA 4.0
2018-08-10T10:17:39.397Z
2018-08-10T10:17:39.397Z
MCCCS
<p>I understand that G is a point on curve which holds true for y^2 = x^3 + ax + b.
But there can be several other points as well which holds true for above equation but how do we choose which one is our G?</p>

<cryptography>
Is there a single point generator G for every elliptic curve?
Ishwar Chandra
# Is there a single point generator G for every elliptic curve?

(Asked by: username_0 on 2018-08-10)

I understand that G is a point on curve which holds true for y^2 = x^3 + ax + b.
But there can be several other points as well which holds true for above equation but how do we choose which one is our G?

**Tags:** cryptography


---

## 2 answers

### Answer by username_1 on 2018-08-10. Score: 1

There often are multiple points which could be generators. In fact, for prime order curves, every point on the curve is a generator.

For practical use, a specific point is picked based on some constraints.

May curves use rules such as lowest `abs(x)` value or use some deterministic generator with a random seed.

I can't seem to find the login behind the G selection for secp256k1, however, but the point itself is defined in the curve specification.

> **Comments:**
> **username_0**: Thanks for the answer. I am actually trying to understand elliptic curve cryptography, specifically how the signature is verified, shared secret generation and  the math behind it. I have gone through lot of information on internet, i am still not able to connect dots to fully understand it. can you help me?  

---

### Answer by username_2 on 2018-08-10. Score: 0

It's defined in the specification of the curve. In Bitcoin, the curve was SECP256k1 is chosen and the curve parameters are defined here: [SEC 2: Recommended Elliptic Curve Domain Parameters, Version 1.0](http://www.secg.org/SEC2-Ver-1.0.pdf)


---

