Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

Can you please list the pros and cons of the Paillier crypto system you have encountered or found?

share|improve this question
3  
Compared to which other cryptosystems? Your question is a bit broad in its current form, you might want to elaborate a bit. –  Paŭlo Ebermann Oct 2 '13 at 18:46
2  
Please also make sure to describe what research you've done. We expect you to show some evidence of effort on your own before asking. Make sure to read the help center. –  D.W. Oct 2 '13 at 19:30
add comment

closed as unclear what you're asking by D.W., rath, e-sushi, Reid, mikeazo Oct 3 '13 at 0:30

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question.If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer

Without anything to compare Paillier, the list will be small but here goes:

Pros:

  1. Has seen a fair amount of proposed application in the published literature
  2. Thanks to #1 there are a number of special constructions (e.g. zero-knowledge proofs) that have been built for Paillier
  3. Is additively homomorphic

Cons:

  1. Lacks small ciphertexts like what you get with elliptic curve crypto
  2. No standards that I'm aware of
share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.