Factorisation and Discrete Logs (was Re: EE Times on PRZ)
Hal
hfinney at shell.portal.com
Wed Jan 18 21:04:22 PST 1995
From: dwa at mirage.svl.trw.com (Dana Albrecht)
> Choose, at random, "a" such that gcd(a,N) = 1.
>
> Compute x such that:
>
> a^x = 1 (mod N) [ Discrete log time! ]
DH uses prime moduli, I believe. Solving the DL problem sufficiently to
break DH may not let you solve it for composite moduli, not without
knowing the factors.
Hal
More information about the cypherpunks-legacy
mailing list