brainpoolP256r1

brainpoolP256r1 is a 256-bit elliptic curve from the Brainpool standard, providing 128-bit security. Brainpool curves were developed by the ECC Brainpool consortium as an alternative to NIST curves, using verifiably pseudo-random parameters to address concerns about potential backdoors in NIST curve generation. brainpoolP256r1 is specified in RFC 5639 and is preferred in some European government and financial systems due to trust concerns with NIST. However, Brainpool curves are significantly slower than both NIST curves and X25519, and have limited browser support. They are rarely seen in general web traffic.