[14859] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

safety of Pohlig-Hellman with a common modulus?

daemon@ATHENA.MIT.EDU (Steve Bellovin)
Sat Dec 6 11:47:02 2003

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: Steve Bellovin <smb@research.att.com>
To: cryptography@metzdowd.com
Date: Sat, 06 Dec 2003 10:14:06 -0500

Is it safe to use Pohlig-Hellman encryption with a common modulus?  
That is, I want various parties to have their own exponents, but share 
the same prime modulus.  In my application, a chosen plaintext attack 
will be possible.  (I know that RSA with common modulus is not safe.)

		--Steve Bellovin, http://www.research.att.com/~smb


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post