New answers tagged discrete-logarithm
1
vote
Does a list of discrete log equations reveal information?
A little notation: we'll write $\mathrm{DLOG}(h,y)$ for a magic, general purpose discrete logarithm solver that returns $z$ where $h^z=y$ in our group of order $q$ and $\mathrm{DH}(h,c,d)$ for a magic,...
2
votes
Can one prove that a particular public key is part of an aggregated (MuSig) public key?
The MuSig (and MuSig2) key aggregation function, for the purpose of this question, is a hash function from multisets of public keys to public keys.
Proving that a particular key is a member of an ...
2
votes
Accepted
If a curve $E/\mathbb{F}_q$ is secure, what can be said about $E/\mathbb{F}_{q^2}$
If you can solve DLP in $E(\mathbb F_{p^2})$, you can solve DLP in $E(\mathbb F_p)$. The "proof" is simply that $E(\mathbb F_p)\subseteq E(\mathbb F_{p^2})$.
What's more, the subgroup of $E(\...
Top 50 recent answers are included
Related Tags
discrete-logarithm × 576elliptic-curves × 118
diffie-hellman × 106
group-theory × 54
public-key × 46
factoring × 41
number-theory × 37
zero-knowledge-proofs × 36
elgamal-encryption × 36
finite-field × 34
hardness-assumptions × 31
cryptanalysis × 29
modular-arithmetic × 29
rsa × 26
encryption × 20
schnorr-signature × 19
pohlig-hellman × 19
attack × 17
commitments × 17
complexity × 16
prime-numbers × 15
dsa × 14
signature × 13
pollard-rho × 12
hash × 11