Exercise 13 Name: 11.5 (Multiplicative ElGamal). Let G be a cyclic group of prime order q generated by g € G. Consider a simple variant of the ElGamal encryption system EMEG = (G. E, D) that is defined over (G. G²). The key generation algorithm G is the same as in EEG, but encryption and decryption work as follows: ⚫ for a given public key pku G and message mЄ G: E(pk, m) := eum, output (v, e) ⚫ for a given secret key sk= a € Zq and a ciphertext (v,e) € G²: D(sk, (v, e)) e/v Show that EMEG has the following property: given a public key pk, and two ciphertexts C1E(pk, m) and c2 E(pk, m2), it is possible to create a new ciphertext e which is an encryption of m₁ m2. This property is called a multiplicative homomorphism.
Exercise 13
Name:
11.5 (Multiplicative ElGamal). Let G be a cyclic group of prime order q generated by g € G. Consider a simple variant of the ElGamal encryption system EMEG = (G. E, D) that is defined over (G. G²). The key generation
⚫ for a given public key pku G and message mЄ G:
E(pk, m) := eum, output (v, e)
⚫ for a given secret key sk= a € Zq and a ciphertext (v,e) € G²:
D(sk, (v, e)) e/v
Show that EMEG has the following property: given a public key pk, and two ciphertexts C1E(pk, m) and c2 E(pk, m2), it is possible to create a new ciphertext e which is an encryption of m₁ m2. This property is called a multiplicative homomorphism.
Trending now
This is a popular solution!
Step by step
Solved in 2 steps