New answers tagged

4 votes
Accepted

Is there an algebra group (or ring) in which computing the inverse element is hard without some trapdoor information?

Trapdoor groups with infeasible inversion have been considered in several papers since the Master's thesis of Hohenberger. They were considered a hypothetical assumption for a long time, but two ...
Mehdi Tibouchi's user avatar
3 votes
Accepted

DHKE: Why using safe prime gives us "safe" subgroups?

An element $x$ has order 1 or 2 if and only if it satisfies the equation $x^2=1$. In a field (which $\mathbb{Z}/p\mathbb{Z}$ is when $p$ is prime), an equation of degree $d$ has at most $d$ solutions; ...
Mehdi Tibouchi's user avatar

Top 50 recent answers are included