Following a bunch of questions on the topic of Pohlig-Hellman encryption. I was wondering if this could be trivially adapted to be done over elliptic curves just like we create EC-DH instead of DH. surprisingly my google searches came up with no references for this, or in fact any symmetric encryption based on elliptic curves. It seems to me elliptic curves should provide the same properties of Pohlig-Hellman but allow same security with smaller keys.