4
$\begingroup$

There are public-key encryption schemes based on many different mathematical hardness assumptions, like the hardness of Decisional Diffie-Hellman problem, the hardness of the Factoring problem, the hardness of the RSA problem, etc.

But my question is, are there any public-key encryption schemes based on the hardness of the Discrete Log problem? Does the hardness of the Discrete Log problem even imply the existence of secure public-key encryption?

$\endgroup$
2
  • $\begingroup$ Elgamal encryption. $\endgroup$
    – kelalaka
    Commented Nov 11, 2020 at 19:38
  • 2
    $\begingroup$ @kelalaka El Gamal is based on the hardness of the Decisional Diffie-Hellman (DDH) problem, which is a stronger hardness assumption than the hardness of the Discrete Log (DLog) problem. $\endgroup$ Commented Nov 11, 2020 at 19:40

1 Answer 1

5
$\begingroup$

It is a major open research question whether such a scheme exists, and how to construct one (see, for example, Open Problem 9.10). Of course, we do have schemes like (hashed) ElGamal, which are based on the conjectured hardness of the (computational or decisional) Diffie-Hellman problem. But it is unknown whether either of these problems is equivalent to the discrete logarithm problem (except, of course, in groups where discrete log is easy).

$\endgroup$
2
  • $\begingroup$ Can you give some kind of proof that it’s an open problem, like a citation? And is the open problem merely about finding such a construction, or is it about whether the hardness of DLog implies the existence of secure public-key encryption? $\endgroup$ Commented Nov 11, 2020 at 23:31
  • $\begingroup$ See my updated answer. $\endgroup$ Commented Nov 11, 2020 at 23:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.