Page 9: Point encoding is clear in both cases. To decode a point on an Edwards curve with parameter d, one takes the y value and computes Alternative encodings are used by existing software, and protocol designers should be aware of this. Alternative encodings may be useful if preexisting software is to be used without changes.