Abstract:
The Decision Diffie-Hellman assumption (DDH) is a gold mine. It
enables one to construct efficient cryptographic systems
with strong security properties. We survey the recent
applications of DDH as well as known results regarding its security.
We describe some open problems in this area.
Reference:
In Proceedings of the Third Algorithmic Number Theory Symposium, Lecture Notes in Computer Science, Vol. 1423, Springer-Verlag, pp. 48--63, 1998
Full paper: gzipped-PostScript
Related papers: See Shoup's paper in Crypto '98 and Naor & Reingold's paper in STOC '97.