Recovering El Gamal secret key from signatures

Asked Nov 24 '14 at 05:31

Active Dec 13 '14 at 23:32

Viewed 407 times

Assume out of a set of ElGamal signatures, I've discovered that two have the same y i.e. $signature_{1}$ on $m_{1}$ = $(y,s_{1})$ and $signature_{2}$ on $m_{2}$ = $(y,s_{2})$.

The public keys for $signature_{1}$ and $signature_{2}$ and messages $m_{1}$ and $m_{2}$ are available.

How can I recover the secret keys from this information?

edited Dec 13 '14 at 23:32

Reuben Tanner

asked Nov 24 '14 at 05:31

byteBiter

With how small the parameters are, just use brute force. – mikeazo Nov 24 '14 at 12:41
When the nonce is reused you can simply solve those two equations for the private key. – CodesInChaos Nov 24 '14 at 13:00
@CodesInChaos post a solution and get the 50 points. – Reuben Tanner Dec 13 '14 at 20:41
2

@Kairos Since this is a duplicate it has been closed and your bounty refunded. If you want to, you can offer a bounty on the duplicate. – CodesInChaos Dec 15 '14 at 15:41

Recovering El Gamal secret key from signatures

0 Answers0