Demonstrating possession of a discrete logarithm without revealing it

  • Authors:
  • David Chaum;Jan-Hendrik Evertse;Jeroen van de Graaf;René Peralta

  • Affiliations:
  • Centre for Mathematics and Computer Science, Amsterdam, The Netherlands;Centre for Mathematics and Computer Science, Amsterdam, The Netherlands;Centre for Mathematics and Computer Science, Amsterdam, The Netherlands;Centre for Mathematics and Computer Science, Amsterdam, The Netherlands

  • Venue:
  • Proceedings on Advances in cryptology---CRYPTO '86
  • Year:
  • 1987

Quantified Score

Hi-index 0.00

Visualization

Abstract

Techniques are presented that allow A to convince B that she knows a solution to the Discrete Log Problem--i.e. that she knows an x such that 驴x 驴 脽 (mod N) holds--without revealing anything about x to B. Protocols are given both for N prime and for N composite. We prove these protocols secure under a formal model which is of interest in its own right. We also show how A can convince B that two elements 驴 and 脽 generate the same subgroup in ZN*, without revealing how to express either as a power of the other.