English

Insecure primitive elements in an ElGamal signature protocol

Cryptography and Security 2015-09-07 v1

Abstract

Consider the classical ElGamal digital signature scheme based on the modular relation αmyrrs [p]\alpha^m\equiv y^r\, r^s\ [p]. In this work, we prove that if we can compute a natural integer ii such that αi mod p\alpha^i\ mod\ p is smooth and divides p1p-1, then it is possible to sign any given document without knowing the secret key. Therefore we extend and reinforce Bleichenbacher's attack presented at Eurocrypt'96.

Cite

@article{arxiv.1509.01504,
  title  = {Insecure primitive elements in an ElGamal signature protocol},
  author = {Omar Khadir},
  journal= {arXiv preprint arXiv:1509.01504},
  year   = {2015}
}
R2 v1 2026-06-22T10:49:24.467Z