How Can You Multiply Ciphertexts in ElGamal Without Decrypting?

  • Context: MHB 
  • Thread starter Thread starter mathmari
  • Start date Start date
  • Tags Tags
    Encryption System
Click For Summary
SUMMARY

The discussion centers on the ElGamal encryption system operating within the group $\mathbb{Z}_{786}^{\star}$, utilizing base $g=\overline{2}$ and public key $y=\overline{5}$. It highlights the ability to multiply ciphertexts, specifically $(r_1, c_1)=(318, 191)$ and $(r_2, c_2)=(79, 118)$, to obtain the encryption of the product of the underlying messages $m_1$ and $m_2$ without decrypting them. This property is due to ElGamal being a Partially Homomorphic encryption scheme, where multiplication of ciphertexts corresponds directly to multiplication of plaintexts.

PREREQUISITES
  • Understanding of ElGamal encryption
  • Familiarity with homomorphic encryption concepts
  • Knowledge of modular arithmetic
  • Basic grasp of group theory, specifically $\mathbb{Z}_{n}^{\star}$
NEXT STEPS
  • Study the mathematical foundations of ElGamal encryption
  • Explore the properties of Partially Homomorphic encryption schemes
  • Learn about modular arithmetic operations in cryptography
  • Investigate other homomorphic encryption systems, such as Paillier or RSA
USEFUL FOR

Cryptographers, security researchers, and students of cryptography who are interested in the practical applications of homomorphic encryption and its mathematical underpinnings.

mathmari
Gold Member
MHB
Messages
4,984
Reaction score
7
Hey! :o

At an ElGamal encryprion system at the group $\mathbb{Z}_{786}^{\star}$ with base $g=\overline{2}$ ( it is a generator ) the public key of Alice is $y=\overline{5}$. We see to encryptions $(r_1, c_1)=(318, 191)$ of the unknown message $m_1$ and $(r_2, c_2)=(79, 118)$ of the unkown message $m_2$. Show how you can calculate the encryption of the message $m_1 \cdot m_2 \pmod p$(without calculations $m_1$ and $m_2$).

Could you give me some hints what we could do ?? (Wondering)
 
Mathematics news on Phys.org
mathmari said:
Hey! :o

At an ElGamal encryprion system at the group $\mathbb{Z}_{786}^{\star}$ with base $g=\overline{2}$ ( it is a generator ) the public key of Alice is $y=\overline{5}$. We see to encryptions $(r_1, c_1)=(318, 191)$ of the unknown message $m_1$ and $(r_2, c_2)=(79, 118)$ of the unkown message $m_2$. Show how you can calculate the encryption of the message $m_1 \cdot m_2 \pmod p$(without calculations $m_1$ and $m_2$).

Could you give me some hints what we could do ?? (Wondering)

Hi mathmari, :)

Elgamal is a Partially Homomorphic encryption scheme which means that there's a correspondence between the operations over the cipertext and the operations over the plaintext. The correspondence is multiplication. So when you multiply two ciphertexts the underlying plaintexts will be multiplied.

Hope this helps. :)
 

Similar threads

  • · Replies 3 ·
Replies
3
Views
2K