| Emmanuel Bresson, Olivier Chevassut, David Pointcheval, and Jean-Jacques Quisquater. Provably authenticated group diffie-hellman key exchange. In Pierangela Samarati, editor, 8th ACM Conference on Computer and Communications Security, Philadelphia, PA, USA, November 2001. ACM Press. |
....has to obtain information about g a 1 : a L . We call the resulting assumptions full target gDDH gCDH (where L = 2 yields regular DDH CDH) We remark that these full target assumptions are the standard way to define generalized (aka group) Diffie Hellman assumptions (e.g. in [STW96, BCP01, BCPQ01, Lys02] but we will find our distinction (and, therefore, terminology) more convenient. Finally, making L larger generally makes the assumption stronger (e.g. Unless a generic inefficient conversion is used, or one assumes the existence of a random oracle, in which case applying the random ....
Emmanuel Bresson, Olivier Chevassut, David Pointcheval, and Jean-Jacques Quisquater. Provably authenticated group diffie-hellman key exchange. In Eighth ACM Conference on Computer and Communication Security, pages 255--264. ACM, November 5--8 2001.
....has to obtain information about g a 1 : a L . We call the resulting assumptions full target gDDH gCDH (where L = 2 yields regular DDH CDH) We remark that these full target assumptions are the standard way to define generalized (aka group) Diffie Hellman assumptions (e.g. in [STW96, BCP01, BCPQ01, Lys02] but we will find our distinction (and, therefore, terminology) more convenient. Finally, making L larger generally makes the assumption stronger (e.g. Unless a generic inefficient conversion is used, or one assumes the existence of a random oracle, in which case applying the ....
....has to obtain information about g a 1 : a L . We call the resulting assumptions full target gDDH gCDH (where L = 2 yields regular DDH CDH) We remark that these full target assumptions are the standard way to define generalized (aka group) Diffie Hellman assumptions (e.g. in [STW96, BCP01, BCPQ01, Lys02] but we will find our distinction (and, therefore, terminology) more convenient. Finally, making L larger generally makes the assumption stronger (e.g. Unless a generic inefficient conversion is used, or one assumes the existence of a random oracle, in which case applying the random oracle ....
Emmanuel Bresson, Olivier Chevassut, and David Pointcheval. Provably authenticated group diffiehellman key exchange --- the dynamic case. In Boyd [Boy01], pages 290--309. 14
No context found.
Emmanuel Bresson, Olivier Chevassut, David Pointcheval, and Jean-Jacques Quisquater. Provably authenticated group diffie-hellman key exchange. In Pierangela Samarati, editor, 8th ACM Conference on Computer and Communications Security, Philadelphia, PA, USA, November 2001. ACM Press.
No context found.
Emmanuel Bresson, Olivier Chevassut, and David Pointcheval. Provably authenticated group Diffie-Hellman key exchange --- the dynamic case. In Colin Boyd, editor, Advances in Cryptology -- ASIACRYPT '2001.
No context found.
E. Bresson, O. Chevassut, D. Pointcheval, and J. Quisquater, "Provably authenticated group Diffie-Hellman key exchange," in Proc. 8th ACM Conference on Computer and Communication Secuirty (CCS), 2001.
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC