Minding your p's and q's

Published: Apr 04, 2000
Updated: Apr 04, 2000
Section: Network Security Library :: Cryptography
Author:
Printable Version
Adjust font size:
Rating: 1/5 - 1 Votes

Over the last year or two, a large number of attacks have been found by the authors and others on protocols based on the discrete logarithm problem, such as ElGamal signature and Diffie Hellman key axchange. These attacks depend on causing variables to assume values whose discrete logarithms can be calculated, whether by forcing a protocol exchange into a smooth subgroup or by choosing degenerate values directly. We survey these attacks and discuss how to build systems that are robust against them. In the process we elucidate a number of the design decisions behind the US Digital Signature Standard.

Click Here to download this article