A.2. The ElGamal public key system

ElGamal’s scheme [28] is based on the difficulty of computing discrete logarithms. This is currently considered to be intractable and comparable to the problem of factoring large numbers that underlies RSA. It is quite easy to understand – really no more complicated than RSA and probably about as easy to implement. As far as is currently known (in the open world at any rate) it is cryptographically about as strong as RSA.

A large prime p along with a primitive root a modulo p are made publicly available. A primitive root is one that ‘generates’ the entire field, so taking successive powers of a modulo p will yield all the integers from 1 to p − 1. For a prime p it can be shown that there always exists a primitive ...

Get The Modelling and Analysis of Security Protocols: the CSP Approach now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.