fentec-project / gofe

Functional encryption library in Go
Apache License 2.0
170 stars 51 forks source link

ElGamal group generation #6

Closed tilenmarc closed 6 years ago

tilenmarc commented 6 years ago

We correct the elgamal group generation to give g a generator of the subgroup of quadratic residues of Z_p, where p is a strong prime. This change is done since it is known that DDH assumption does not hold in general Z_p* group while it is believed it holds in the subgroup of quadratic residues.