Factorisation and Discrete Logs (was Re: EE Times on PRZ)

Hal hfinney at shell.portal.com
Wed Jan 18 21:04:22 PST 1995


From: dwa at mirage.svl.trw.com (Dana Albrecht)
> Choose, at random, "a" such that gcd(a,N) = 1.
> 
> Compute x such that:
> 
>      a^x = 1 (mod N)          [ Discrete log time! ]

DH uses prime moduli, I believe.  Solving the DL problem sufficiently to
break DH may not let you solve it for composite moduli, not without
knowing the factors.

Hal






More information about the cypherpunks-legacy mailing list