Goto

Collaborating Authors

 gcrypt

On the (In)Security of ElGamal in OpenPGP

Communications of the ACM

Let G be a group and g G a generator. To create a key pair (sk, pk), pick a random integer x, compute the element X gx, and output (sk, pk): (x, X). Given pk, to encrypt a message M, pick an ephemeral random integer y, compute the elements Y gy and Z Xy gxy, and output C (C1, C2): (Y, M · Z) as the ciphertext. Given sk, to decrypt C, first recover element Z from C1 as per Z Yx gyx and then use C2, Z to recover M C2/Z. To instantiate the scheme, the following details have to be fixed: Which group G shall be used?

  Country:
  Industry: Information Technology > Security & Privacy (1.00)
  Technology:

Add feedback