ElGamal signature scheme

ElGamal signature scheme

The ElGamal signature scheme is a digital signature scheme which is based on the difficulty of computing discrete logarithms. It was described by Taher ElGamal in 1984 (see T. ElGamal, A public key cryptosystem and a signature scheme based on discrete logarithms, IEEE Trans inf Theo, 31:469–472, 1985).

The ElGamal signature algorithm described in this article is rarely used in practice. A variant developed at NSA and known as the Digital Signature Algorithm is much more widely used. There are several other variants (see K. Nyberg and R. A. Rueppel, Message recovery for signature schemes based on the discrete logarithm problem, Designs, Codes and Cryptography, 7:61–81, 1996). The ElGamal signature scheme must not be confused with ElGamal encryption which was also invented by Taher ElGamal.

The ElGamal signature scheme allows that a verifier can confirm the authenticity of a message "m" sent by the signer sent to him over an insecure channel.

ystem parameters

* Let "H" be a collision-resistant hash function.
* Let "p" be a large prime such that computing discrete logarithms modulo "p" is difficult.
* Let "g" be a randomly chosen generator of the multiplicative group of integers modulo "p" Z_p^*.

These system parameters may be shared between users.

Key generation

* Choose randomly a secret key "x" with 1 < "x" < "p" − 1.
* Compute "y" = "g" "x" mod "p".
* The public key is ("p", "g", "y").
* The secret key is "x".These steps are performed once by the signer.

ignature generation

To sign a message "m" the signer performs the following steps.
* Choose a random "k" such that 0 < "k" < "p" − 1 and gcd("k", "p" − 1) = 1.
* Compute r , equiv , g^k pmod p.
* Compute s , equiv , (H(m)-x r)k^{-1} pmod{p-1}.
* If s=0 start over again.Then the pair ("r","s") is the digital signature of "m".The signer repeats these steps for every signature.


A signature ("r","s") of a message "m" is verified as follows.
* 0 and 0.
* g^{H(m)} , equiv , y^r r^s pmod p.The verifier accepts a signature if all conditions are satisfied and rejects it otherwise.


The algorithm is correct in the sense that a signature generated with the signing algorithm will always be accepted by the verifier.

The signature generation implies: H(m) , equiv , x r + s k pmod{p-1}.Hence Fermat's little theorem implies :egin{matrix}g^{H(m)} & equiv & g^{xr} g^{ks} \& equiv & (g^{x})^r (g^{k})^s \& equiv & (y)^r (r)^s pmod p.\end{matrix}


A third party can forge signatures either by finding the signer's secret key "x" or by finding collisions in the hash function H(m) equiv H(M) pmod{p-1}. Both problems are believed to be difficult.

The signer must be careful to choose a different "k" uniformly at random for each signature and to be certain that "k", or even partial information about "k", is not leaked. Otherwise, an attacker may be able to deduce the secret key "x" with reduced difficulty, perhaps enough to allow a practical attack. In particular, if two messages are sent using the same value of "k" and the same key, then an attacker can compute "x" directly.

See also

* Digital Signature Algorithm
* Elliptic Curve DSA
* ElGamal encryption

Wikimedia Foundation. 2010.

Игры ⚽ Поможем написать реферат

Look at other dictionaries:

  • Merkle signature scheme — The Merkle signature scheme is a digital signature scheme based on hash trees (also called Merkle trees) and one time signatures such as the Lamport signature scheme. It was developed by Ralph Merkle in the late 70s and is an alternative to… …   Wikipedia

  • ElGamal encryption — In cryptography, the ElGamal encryption system is an asymmetric key encryption algorithm for public key cryptography which is based on the Diffie Hellman key agreement. It was described by Taher Elgamal in 1984 [Taher ElGamal, A Public Key… …   Wikipedia

  • Signature (disambiguation) — A signature is a hand written, stylized version of someone s name.Signature may also mean: NOTOC In computers*Signature block, text automatically appended at the bottom of an e mail message, Usenet article, or forum post. *Method signature, in… …   Wikipedia

  • Elgamal-Signaturverfahren — Das Elgamal Signaturverfahren ist ein Verfahren für digitale Signaturen, welches auf dem mathematischen Problem des diskreten Logarithmus aufbaut. Es ist zu unterscheiden von dem Elgamal Verschlüsselungsverfahren, wobei beide Verfahren 1984 von… …   Deutsch Wikipedia

  • Taher Elgamal — Dr. Taher Elgamal (Arabic: طاهر الجمل) (born 18 August 1955) is an Egyptian cryptographer. Elgamal is sometimes written as El Gamal or ElGamal, but Elgamal is now preferred. In 1985, Elgamal published a paper titled A Public key Cryptosystem and… …   Wikipedia

  • Digital signature — This article is about secure cryptographic signatures. For simple signatures in digital form, see Electronic signature. A digital signature or digital signature scheme is a mathematical scheme for demonstrating the authenticity of a digital… …   Wikipedia

  • Digital Signature Algorithm — The Digital Signature Algorithm (DSA) is a United States Federal Government standard or FIPS for digital signatures. It was proposed by the National Institute of Standards and Technology (NIST) in August 1991 for use in their Digital Signature… …   Wikipedia

  • Pointcheval-Stern signature algorithm — In cryptography, the Pointcheval Stern signature algorithm is a digital signature scheme based on the closely related ElGamal signature scheme. It changes the ElGamal scheme slightly to produce an algorithm which has been proven secure in a… …   Wikipedia

  • Taher ElGamal — (arab: طاهر الجمل, geb. 1956 in Ägypten) ist ein US amerikanischer Wissenschaftler. Ursprünglich aus Ägypten stammend, studierte er an der Universität Kairo Elektrotechnik und schloss dort 1981 mit dem Bachelor of Science ab. An der Stanford… …   Deutsch Wikipedia

  • Taher Elgamal — (2010) Taher Elgamal (arabisch ‏طاهر الجمل‎; * 18. August 1955 in Kairo, Ägypten) ist ein US amerikanischer Kryptologe. Ursprünglich aus Ägypten stammend, studierte er an der Universität Kairo Ele …   Deutsch Wikipedia

Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”