There is a formula to calculate number of rounds in https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.

There is a formula to calculate number of rounds in https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf Appendix C.1. OpenSSL use it: https://github.com/openssl/openssl/blob/ee8772e3565a84fde9e23124a76cab8e6f2b3778/include/openssl/bn.h#L116 https://github.com/openssl/openssl/blob/ee8772e3565a84fde9e2... For 160-bit prime and security level 2^-80, 19 rounds is enough.