Can you please list the pros and cons of the Paillier crypto system you have encountered or found?


closed as unclear what you're asking by D.W., rath, user6961, Reid, mikeazo Oct 3 '13 at 0:30

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 3
    $\begingroup$ Compared to which other cryptosystems? Your question is a bit broad in its current form, you might want to elaborate a bit. $\endgroup$ – Paŭlo Ebermann Oct 2 '13 at 18:46
  • 2
    $\begingroup$ Please also make sure to describe what research you've done. We expect you to show some evidence of effort on your own before asking. Make sure to read the help center. $\endgroup$ – D.W. Oct 2 '13 at 19:30

Without anything to compare Paillier, the list will be small but here goes:


  1. Has seen a fair amount of proposed application in the published literature
  2. Thanks to #1 there are a number of special constructions (e.g. zero-knowledge proofs) that have been built for Paillier
  3. Is additively homomorphic


  1. Lacks small ciphertexts like what you get with elliptic curve crypto
  2. No standards that I'm aware of

Not the answer you're looking for? Browse other questions tagged or ask your own question.