How can I use these properties to attack the DHKE? I know that the order of $a$ is always $2$ for $a = P - 1$ in $Z_p$. The subgroups generated by a will be $\{1,a\}$.


closed as off-topic by e-sushi, cygnusv, yyyyyyy, poncho, SEJPM Jun 20 '15 at 20:48

  • This question does not appear to be about cryptography within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.


If the order of $a=-1\mod{p}$ and $b=a^{e}\mod{p}$, then $b=\pm{1}\mod{p}$.
If $b=1\mod{p}$, the discrete logarithm is $0$.
If $b=-1\mod{p}$, the discrete logarithm is $1$.


Not the answer you're looking for? Browse other questions tagged or ask your own question.