[14859] in cryptography@c2.net mail archive
safety of Pohlig-Hellman with a common modulus?
daemon@ATHENA.MIT.EDU (Steve Bellovin)
Sat Dec 6 11:47:02 2003
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: Steve Bellovin <smb@research.att.com>
To: cryptography@metzdowd.com
Date: Sat, 06 Dec 2003 10:14:06 -0500
Is it safe to use Pohlig-Hellman encryption with a common modulus?
That is, I want various parties to have their own exponents, but share
the same prime modulus. In my application, a chosen plaintext attack
will be possible. (I know that RSA with common modulus is not safe.)
--Steve Bellovin, http://www.research.att.com/~smb
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com