[Resource Topic] 2016/1189: On the Bit Security of Elliptic Curve Diffie--Hellman

Welcome to the resource topic for 2016/1189

Title:
On the Bit Security of Elliptic Curve Diffie–Hellman

Authors: Barak Shani

Abstract:

This paper gives the first bit security result for the elliptic curve Diffie–Hellman key exchange protocol for elliptic curves defined over prime fields. About 5/6 of the most significant bits of the x-coordinate of the Diffie–Hellman key are as hard to compute as the entire key. A similar result can be derived for the 5/6 lower bits. The paper also generalizes and improves the result for elliptic curves over extension fields, that shows that computing one component (in the ground field) of the Diffie–Hellman key is as hard to compute as the entire key.

ePrint: https://eprint.iacr.org/2016/1189

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .