The decision Diffie-Hellman problem

Authors: D. Boneh

The Decision Diffie-Hellman assumption (DDH) is a gold mine. It enables one to construct efficient cryptographic systems with strong security properties. We survey the recent applications of DDH as well as known results regarding its security. We describe some open problems in this area.

In Proceedings of the Third Algorithmic Number Theory Symposium,
Lecture Notes in Computer Science, Vol. 1423, Springer-Verlag, pp. 48--63, 1998

Full paper: pdf, ps

Related papers: See Shoup's paper in Crypto '98 and Naor & Reingold's paper in STOC '97.