# Pasta Curves

The two curves pallas and vesta (pa(llas ve)sta) created by the Zcash team. Each curve’s scalar field is the other curve’s base field, which is practical for recursion (see Pickles).

Note that in general Fq refers to the base field (in which the curve is defined over), while Fr refers to the scalar field (defined by the order of the curve). But in our code, because of the cycles:

• Fp refers to the base field of Pallas, and the scalar field of Vesta
• Fq refers to the base field of Vesta, and the scalar field of Pallas

Note that .

In pickles:

• Vesta is also referred to as the step curve, or the tick curve.
• Pallas is also referred to as the wrap curve, or the tock curve.

## Pallas

• curve equation:
• base field:
• scalar field:
• mina generator:
• arkworks generator:
• endo:

endo_q = 2D33357CB532458ED3552A23A8554E5005270D29D19FC7D27B7FD22F0201B547


You can use sage to test this:

Fp = GF(28948022309329048855892746252171976963363056481941560715954676764349967630337)
Pallas = EllipticCurve(Fp, [0, 5])
Pallas.count_points()


## Vesta

• curve equation:

• base field:

• scalar field:

• mina generator:

• arkworks generator:

• endo:

endo_q = 06819A58283E528E511DB4D81CF70F5A0FED467D47C033AF2AA9D2E050AA0E4F

Fq = GF(28948022309329048855892746252171976963363056481941647379679742748393362948097)