Can we do modulus switching for number theoretic encryption such as Paillier or ElGamal?

  • 1
    $\begingroup$ In theory I guess you could, but what would be the purpose of it? $\endgroup$
    – pg1989
    Apr 28 '16 at 21:12
  • $\begingroup$ What is "modulus switching" ? $\endgroup$
    – fkraiem
    Apr 29 '16 at 1:55
  • $\begingroup$ @fkraiem Just change the modular to a larger number. Like FHE. $\endgroup$
    – Jan Leo
    Apr 29 '16 at 7:37

Security goals like confidentiality is the reason to ask for encryption. Modulus is chosen (for particular group types) on the grounds of hard problems associated with that groups; encryption strength is defined by level of hardness of that problems.

It would be nice to discover a hard problem related to some change of modulus, comparable to indistinguishability of Diffie-Hellman tuples of 4 group elements for ElGamal or $n$-th roots for Paillier with modulus $n^2$.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.