How to motivate, that in ElGamal Alice the recipient keeps her keys fixed, while Bob the sender changes the key each time - why not both of them change their keys each time?

  • $\begingroup$ And also, what is the difference between ephemeral-static ElGamal and DHE? Looks the same to me. $\endgroup$ – yoho buzi Apr 6 '19 at 3:15
  • 1
    $\begingroup$ How would you be able to trust that the changed key is indeed the key of Alice? An adversary could simply replace that key in the protocol by his / her own. If you have a way to trust the ephemeral keys then the scheme would be possible, but that may require another static key... $\endgroup$ – Maarten Bodewes Apr 6 '19 at 8:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.