Tagged Questions
0
votes
1answer
115 views
Why is proof-by-reduction needed (for Elgamal proof of security, for example)?
The textbook proof for Elgamal encryption basically reduces to the Decisional Diffie-Hellman assumption (DDH).
Elgamal:
$Gen(.): x \xleftarrow{R} \mathbb{Z}_p$; $Enc(m,g^x): r \xleftarrow{R} ...
4
votes
3answers
210 views
Is there a public key semantically secure cryptosystem for which one can prove in zero knowledge the equivalence of two plaintexts?
If Alice encrypts two messages $a$ and $b$, such that $x=E(a)$, $y=E(b)$. Can Alice prove (without revealing $a$, $b$ or the private key) that $a = b$?
Obviously the proof must not be too long and it ...
