How can we prove mathematically that in Paillier cryptosystem decryption, our message is equal to the right side of $$M=L(c^{\lambda(n)}\bmod n^2)\,\mu\bmod n$$

  • 1
    $\begingroup$ Lindell's Book has it! $\endgroup$ – kelalaka Apr 13 at 14:27
  • 1
    $\begingroup$ As kelala mentions, there are plenty of standard sources for this. Perhaps you can show us what you have tried and then we could guide you from there $\endgroup$ – Daniel Apr 13 at 16:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.