Hard instances of the constrained discrete logarithm problem

Ilya Mironov, Anton Mityagin, Kobbi Nissim

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

3 Scopus citations

Abstract

The discrete logarithm problem (DLP) generalizes to the constrained DLP, where the secret exponent x belongs to a set known to the attacker. The complexity of generic algorithms for solving the constrained DLP depends on the choice of the set. Motivated by cryptographic applications, we study explicit construction of sets for which the constrained DLP is hard. We draw on earlier results due to Erdös et al. and Schnorr, develop geometric tools such as generalized Menelaus' theorem for proving lower bounds on the complexity of the constrained DLP, and construct explicit sets with provable non-trivial lower bounds.

Original languageEnglish
Title of host publicationAlgorithmic Number Theory - 7th International Symposium, ANTS-VII, Proceedings
PublisherSpringer Verlag
Pages582-598
Number of pages17
ISBN (Print)3540360751, 9783540360759
DOIs
StatePublished - 1 Jan 2006
Event7th International Symposium on Algorithmic Number Theory, ANTS-VII - Berlin, Germany
Duration: 23 Jul 200628 Jul 2006

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume4076 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference7th International Symposium on Algorithmic Number Theory, ANTS-VII
Country/TerritoryGermany
CityBerlin
Period23/07/0628/07/06

ASJC Scopus subject areas

  • Theoretical Computer Science
  • General Computer Science

Fingerprint

Dive into the research topics of 'Hard instances of the constrained discrete logarithm problem'. Together they form a unique fingerprint.

Cite this