Paper 2011/131

Trapdoor oneway functions associated with exponentiation

Virendra Sule


This paper shows that if exponentiation $b=X^{k}$ in groups of finite field units or $B=[k]X$ in elliptic curves is considered as encryption of $X$ with exponent $k$ treated as symmetric key, then the decryption or the computation of $X$ from $b$ (respectively $B$) can be achieved in polynomial time with a high probability under random choice of $k$. Since given $X$ and $b$ or $B$ the problem of computing the discrete log $k$ is not known to have a polynomial time solution, the exponentiation has a trapdoor property associated with it. This paper makes this property precise. Further the decryption problem is a special case of a general problem of solving equations in groups. Such equations lead to more such trapdoor one way functions when solvable in polynomial time. The paper considers single and two variable equations on above groups and determines their solvability.

Available format(s)
Secret-key cryptography
Publication info
Published elsewhere. Unknown where it was published
Exponential functionelliptic curvesdivision polynomials
Contact author(s)
vrs @ ee iitb ac in
2011-03-18: received
Short URL
Creative Commons Attribution


      author = {Virendra Sule},
      title = {Trapdoor oneway functions associated with exponentiation},
      howpublished = {Cryptology ePrint Archive, Paper 2011/131},
      year = {2011},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.