user135718: the curve secp256k1 is defined over the prime finite field F_p with p = 2^256 - 2^32 - 2^9 - 2^8 - 2^7 - 2^6 - 2^4 - 1.
Is there any known cyclic subgroup of order 2^n of F_p?

user208: No, there cannot be.
There are two groups defined by the secp256k1 field, the addition group, and the group of multiplication of its non-zero elements.
Neither has a large 2n subgroup, because the order of a subgroup of a finite group must be a divisor of the order of that group.

The order of the additive group must divide the size of the field, namely p, the modulus itself, which is prime, and thus only has itself and the trivial group as subgroups.

The order of the multiplicative group of a field is one less than the size of the field, so p-1, which factors as 2 * 3 * 7 * 13441 * 205115282021455665897114700593932402728804164701536103180137503955397371. Thus, it only has C2 (the cyclic group with two elements) as subgroup whose order is a power of two. Specifically, in the embedding in the secp256k1 multiplicative group, that subgroup consists of the elements 1 and p-1, and the multiplication between them.



135718: <p>the curve secp256k1 is defined over the prime finite field F_p with p = 2^256 - 2^32 - 2^9 - 2^8 - 2^7 - 2^6 - 2^4 - 1.</p>
<p>Is there any known cyclic subgroup of order 2^n of F_p?</p>
 208: <p>No, there cannot be.</p>
<p>There are two groups defined by the secp256k1 field, the addition group, and the group of multiplication of its non-zero elements.</p>
<p>Neither has a large <em>2<sup>n</sup></em> subgroup, because the order of a subgroup of a finite group must be a divisor of the order of that group.</p>
<ul>
<li><p>The order of the additive group must divide the size of the field, namely p, the modulus itself, which is prime, and thus only has itself and the trivial group as subgroups.</p>
</li>
<li><p>The order of the multiplicative group of a field is one less than the size of the field, so <em>p-1</em>, which factors as <em>2 * 3 * 7 * 13441 * 205115282021455665897114700593932402728804164701536103180137503955397371</em>. Thus, it only has <em>C<sub>2</sub></em> (the cyclic group with two elements) as subgroup whose order is a power of two. Specifically, in the embedding in the secp256k1 multiplicative group, that subgroup consists of the elements <em>1</em> and <em>p-1</em>, and the multiplication between them.</p>
</li>
</ul>
