I know about ElGamal scheme and its key generation, encryption, and decryption methods. I'm not sure about what is meant by batch ElGamal.

Can someone please clarify it. How it differs from ElGamal and what are the attacks possible on that scheme. How do we prevent them?

  • $\begingroup$ Batch ElGamal scheme is the collection of all those processes you mentioned. I don't know about what are the attacks possible and what is the real-implementation usage of it. $\endgroup$
    – Venba
    Sep 26, 2015 at 11:48
  • $\begingroup$ Just to make sure we are talking about the same subject, could you indicate where you have found this "batch ElGamal"? I see something here but ... " An attacker could manipulate adjascent messages so that their changes cancel out in batch verification. This might cause an attack on message integrity getting unnoticed. To prevent this, we need to select a batch of message-signature pairs randomly rather than selecting them sequencially for a single batch. " scared the bj out of me. $\endgroup$
    – Maarten Bodewes
    Sep 26, 2015 at 11:54
  • $\begingroup$ @Venba Our helpful mods are a bit more forgiving than on SO I guess (less workload), thanks for the conversion to comment, CodesInChaos :) $\endgroup$
    – Maarten Bodewes
    Sep 26, 2015 at 12:00


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.