Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I look for one-pass deniable authentication protocol with a short message payload for my project and find a solution:

*Wei-Bin Lee, Chia Chun Wu, and Woei-Jiunn Tsaur. "A novel deniable authentication protocol using generalized ElGamal signature scheme." Inf. Sci.-177(6):1376-1381 (2007)*

Unfortunately later I found a forum archive where member claimed to have discovered an attack on this protocol:

But in another modern works authors mention this protocol as a reliable:

I am not a specialist in mathematics and I can not assess the credibility of proofs. I put the found materials for download: (and nida.pdf for protocol description)

This protocol is still secure? Will it work correctly on the EC25519?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.