0
$\begingroup$

Does breaking the computational Diffie-Hellman problem in a group also always break discrete logarithms in that group?

$\endgroup$
3
  • $\begingroup$ The present question is a less precise version of these two. $\endgroup$
    – fgrieu
    Aug 28, 2021 at 16:37
  • $\begingroup$ Not sure I understand. I read this paper citeseerx.ist.psu.edu/viewdoc/… but they do not claim that breaking CDH always breaks DLP (only under certain circumstances). However, I believe it is generally true. $\endgroup$
    – LinusK
    Aug 28, 2021 at 16:45
  • 1
    $\begingroup$ AFAIK there is no known group where we can break CDH but not solve the DLP. According to this there are classes of groups where the two are proven equivalent. That would mean that we don't know an answer to your question except in some classes of groups, where it is yes. I don't know more. $\endgroup$
    – fgrieu
    Aug 28, 2021 at 17:25

0