Paper 2001/003 Original: eprint.iacr.org/2001/003 ↗
Separating Decision Diffie-Hellman from Diffie-Hellman in cryptographic groups
Abstract
In many cases, the security of a cryptographic scheme based on Diffie--Hellman does in fact rely on the hardness of the Diffie--Hellman Decision problem. In this paper, we show that the hardness of Decision Diffie--Hellman is a much stronger hypothesis than the hardness of the regular Diffie--Hellman problem. Indeed, we describe a reasonably looking cryptographic group where Decision Diffie--Hellman is easy while Diffie--Hellman is equivalent to a -- presumably hard -- Discrete Logarithm Problem. This shows that care should be taken when dealing with Decision Diffie--Hellman, since its security cannot be taken for granted.
Metadata
- Available format(s)
PDF- Category
- Public-key cryptography
- Publication info
- Preprint.
- History
- 2001-01-10: last updated
- 2001-01-10: published
- Short URL
- https://ia.cr/2001/003
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2001/003,
author = {Antoine Joux and Kim Nguyen},
title = {Separating Decision Diffie-Hellman from Diffie-Hellman in cryptographic groups},
howpublished = {Cryptology {ePrint} Archive, Paper 2001/003},
year = {2001},
url = {https://eprint.iacr.org/2001/003}
}