In the Handbook of Applied Cryptography (Menezes, A. J.; van Oorschot, P. C. & Vanstone, S. A.) Protocol MTI/A0 key agreement (algorithm 12.53) described as $\mod p$-protocol. The survey Overview of Key Agreement Protocols (Ratna Dutta and Rana Barua) describes MTI/A0 as elliptic curve-protocol.

Unfortunately I have no access to original MTI article. How MTI-protocols were described originally?

  • 2
    $\begingroup$ I don't know how they were described originally, but this protocol is a derivative of Diffie-Hellman. This can be instantiated with any group, for example $\mathbb{Z}_p^*$ or the points on an elliptic curve. If you replace all $\mathbb{Z}_p^*$ elements in Algorithm 12.53 by generic group elements, all should still work. $\endgroup$ – CurveEnthusiast Dec 15 '17 at 7:53
  • $\begingroup$ @CurveEnthusiast Yes, I understand that this works in arbitrary group. My question is only about original MTI approach. $\endgroup$ – Alexey Ustinov Dec 15 '17 at 11:13
  • 2
    $\begingroup$ I also can't access this (easily), sorry. Given that the article is from '86, when ecc was still in kindergarten, I would expect they give it the mod $p$ treatment. $\endgroup$ – CurveEnthusiast Dec 15 '17 at 11:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.