I haven't been able to find a clear explanation on this (and I'm probably just confused in general). I have the following parameters of ElGamal signatures:
- p$p$ = safe prime
- q = (p-1)/2$q = (p-1)/2$
- g$g$ = an element of F$_p$$F_p$ with order q$q$.
- r$r$ = random 1 < r < q$1 < r < q $
- s$s$ = private key
- Y$Y$ = public key, $Y = g^s$
My question is, is there an easy way to generate a "g"$g$ value, or should iI just generate a random value, then check that it is in the fieldgroup?