Factbites
 Where results make sense
About us   |   Why use us?   |   Reviews   |   PR   |   Contact us  

Topic: ElGamal


Related Topics
EBX

In the News (Sat 2 Jun 12)

  
  ElGamal discrete log cryptosystem
The ElGamal algorithm is an asymmetric key encryption algorithm[?] for public key cryptography which is based on discrete logarithms.
The ElGamal algorithm is used in the free GNU Privacy Guard software, recent versions of PGP, and other crypto systems.
Breaking ElGamal is believed to be, by most informed observers, generally as difficult as solving the discrete logarithm problem.
www.ebroadcast.com.au /lookup/encyclopedia/el/ElGamal.html   (364 words)

  
 ElGamal encryption - Wikipedia, the free encyclopedia
The Digital Signature Algorithm is a variant of the ElGamal signature scheme, which should not be confused with the ElGamal algorithm.
ElGamal consists of three components: the key generator, the encryption algorithm, and the decryption algorithm.
ElGamal is a simple example of a semantically secure asymmetric key encryption algorithm (under reasonable assumptions).
en.wikipedia.org /wiki/ElGamal   (759 words)

  
 The ElGamal public key system (in Technology > Encryption @ iusmentis.com)
Although the inventor, Taher Elgamal, did not apply for a patent on his invention, the owners of the Diffie-Hellman patent (US patent 4,200,770) felt this system was covered by their patent.
Elgamal's last name does not have a capital letter 'G'.
A disadvantage of the ElGamal system is that the encrypted message becomes very big, about twice the size of the original message m.
www.iusmentis.com /technology/encryption/elgamal   (238 words)

  
 math lessons - Taher Elgamal
In 1985, Elgamal published a paper titled A Public key Cryptosystem and A Signature Scheme based on discrete Logarithms in which he proposed the design of the ElGamal discrete log cryptosystem.
Elgamal has had Bachelor of Science degree from Cairo University, and Masters and Doctorate degrees in Computer Science from Stanford University.
Elgamal's surname has been spelled as two words (the El part is equalivant to "the" in English), and as a single word with an intra-capital.
www.mathdaily.com /lessons/Taher_ElGamal   (294 words)

  
 RSA Security - 3.6.8 What are some other public-key cryptosystems?
The ElGamal system [Elg85] is a public-key cryptosystem based on the discrete logarithm problem.
The system parameters for the ElGamal cryptosystem are a prime p and an integer g, whose powers modulo p generate a large number of elements (it is not necessary for g to be a generator of the group Z
The ElGamal signature algorithm is similar to the encryption algorithm in that the public key and private key have the same form.
www.rsasecurity.com /rsalabs/node.asp?id=2255   (834 words)

  
 AusCERT - ESB-2003.0820 -- GnuPG Security Advisory -- GnuPG's ElGamal signing keys compromised
Note also that ElGamal signing keys cannot be generated without the use of a special flag to enable hidden options and even then overriding a warning message about this key type.
Thus I have always dissuaded people from using ElGamal keys for signing; however they are still used and about 200 keys per year are generated and uploaded to the keyservers.
Such a signature is always available for primary ElGamal keys because signatures created with that key are used to bind the user ID and other material to the primary key (self-signatures).
www.auscert.org.au /render.html?it=3648   (1417 words)

  
 Information Security Expert Taher Elgamal Joins Cranite Systems Advisory Board   (Site not responding. Last check: 2007-10-04)
Elgamal is CEO of EKtasis, founder of Securify and Netscape’s former Chief Scientist.
Elgamal joins Cranite's advisory board as the company begins shipment of its new product SafeConnect, the industry’s most secure access solution for enterprise connectivity from hotspots, public networks, home wired and wireless networks as well as from within the enterprise.
Elgamal invented several industry and government standards in the data security and digital signatures areas, including the DSS government standard for digital signatures.
www.cranite.com /press/releases/release-051220.php   (426 words)

  
 Cranite - Board of Advisors
Elgamal is recognized in the industry as the inventor of Secure Sockets Layer (SSL), a protocol developed by Netscape for transmitting private documents via the Internet.
Elgamal developed basic work that was adopted in commercial products by nearly a dozen companies, several IEEE and ISO standards, as well the adapted DSS government standard for digital signatures.
Elgamal is on the boards of Securify, Facetime, hi/fn, Phoenix Technology and Tumbleweed.
www.cranite.com /about/advisors.php   (1330 words)

  
 FaceTime Communications - Enterprise IM and P2P Management, Security and Compliance Solutions
Elgamal was chief scientist at Netscape Communications where he pioneered SSL, the standard for web security.
Prior to Netscape, Dr. Elgamal was the director of Engineering at RSA Data Security, Inc. While there, he built and ran the engineering department that developed the industry standard RSA cryptographic toolkits.
A recognized leader in the information security industry, Dr. Elgamal has made numerous contributions to the industry including development of the original public key cryptography and digital signature technology and the Elgamal cryptography technology later adopted by NIST as the digital signature standard (DSS).
www.facetime.com /pr/pr050215_elgamal.aspx   (495 words)

  
 [ale] GnuPG and ElGamal...
I mentioned that there were several disadvantages to using ElGamal for signing or for signature keys (primarily, the performance of such keys majorly sucks and the signatures are huge).
The ElGamal algorithms are highly asymetrical (which is why signature verification is an order of magnitude worse in performance and the signatures are so grossly large) leading to this skewed compromise.
That means that, even if you had good secure ElGamal keys from earlier version, if you USE and ElGamal key to sign with recent versions of GnuPG, no matter when the key was created, the key is now compromised by the existance of that weak signature.
www.ale.org /pipermail/ale/20031127/003789.html   (650 words)

  
 ElGamal/AES+SessionTag
Within I2P, various messages are encrypted, but we don't want anyone to know to whom or from whom it is bound, so we can't just toss a "to" or "from" address.
In addition, messages are not delivered in order (or reliably), so we can't simply ElGamal encrypt the first message and AES the subsequent messages.
The alternative of ElGamal encrypting each individual message is daunting in light of the message frequency desired.
www.i2p.net /how_elgamalaes   (266 words)

  
 Q29: What is the ElGamal Cryptosystem?   (Site not responding. Last check: 2007-10-04)
The ElGamal system is a public-key cryptosystem based on the discrete logarithm problem.
The ElGamal signature algorithm is similar to the encryption algorithm in that the public key and private key have the same form; however, encryption is not the same as signature verification, nor is decryption the same as signature creation as in RSA (
The main disadvantage of ElGamal is the need for randomness, and its slower speed (especially for signing).
www.x5.net /faqs/crypto/q29.html   (227 words)

  
 O-037: Red Hat GnuPG Packages ElGamal Keys Vulnerability
ElGamal keys are used for both signing and encrypting functions.
ElGamal is a widely distributed security algorithm being used in Red Hat's GnuPG packages.
These updates disable the ability to generate ElGamal keys (used for both signing and encrypting) and disable the ability to use ElGamal public keys for encrypting data.
www.ciac.org /ciac/bulletins/o-037.shtml   (848 words)

  
 I C I C T
Elgamal was the Director of Engineering at RSA Data Security, Inc. While there, he built and ran the engineering department that developed the RSA cryptographic toolkits, the industry standard for security-enabled applications and systems development.
He invented Elgamal cryptography technology later adopted by NIST as the digital signature standard (DSS).
Elgamal serves on the board of directors of RSA Data Security, Hifn, Phoenix Technologies and Tumbleweed.
www.icict.gov.eg /ICICT2003/elgamal.jsp   (196 words)

  
 UCSD: Structural Engineering
Elgamal, A., Yang, Z., Parra, E., and Ragheb, A., (2003).
Elgamal, A., Yang, Z., and Parra, E., (2002).
Elgamal, A., Parra, E., Yang, Z., and Adalier, K., (2002).
www.structures.ucsd.edu /index.php?page=structural_engineering/people/faculty/elgamal   (354 words)

  
 ISS X-Force Database: gnupg-elgamal-key-disclosure(13852): GnuPG ElGamal sign+encrypt key disclosure   (Site not responding. Last check: 2007-10-04)
ElGamal encrypt-only keys (type 16) are not affected by this vulnerability.
CERT Vulnerability Note VU#940388, GnuPG creates ElGamal keys for signing using insufficient entropy at http://www.kb.cert.org/vuls/id/940388.
CVE-2003-0971: GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.
xforce.iss.net /xforce/xfdb/13852   (728 words)

  
 Security Forums :: View topic - GnuPG's ElGamal signing keys compromised
ElGamal signing keys cannot be generated without the use of a special
Consider all material signed or encrypted with such a key as compromised.
We have to distinguish between two cases: The primary key is ElGamal
www.security-forums.com /viewtopic.php?t=10329   (1154 words)

  
 Gentoo Linux Documentation -- GnuPG: ElGamal signing keys compromised and format string vulnerability
A bug in GnuPG allows ElGamal signing keys to be compromised, and a format string bug in the gpgkeys_hkp utility may allow arbitrary code execution.
These keys are not commonly used, but this is "a significant security failure which can lead to a compromise of almost all ElGamal keys used for signing.
If you have used ElGamal keys for signing your private key can be compromised, and a malicious keyserver could remotely execute arbitrary code with the permissions of the user running gpgkeys_hkp.
www.gentoo.org /security/en/glsa/glsa-200312-05.xml   (229 words)

  
 Why Textbook ElGamal and RSA Encryption are Insecure   (Site not responding. Last check: 2007-10-04)
We present an attack on plain ElGamal and plain RSA encryption.
The attack shows that without proper preprocessing of the plaintexts, both ElGamal and RSA encryption are fundamentally insecure.
Namely, when one uses these systems to encrypt a (short) secret key of a symmetric cipher it is often possible to recover the secret key from the ciphertext.
crypto.stanford.edu /~dabo/abstracts/ElGamalattack.html   (99 words)

  
 SecurityTracker.com Archives - GnuPG ElGamal Signature Flaw May Disclose Type 20 ElGamal Private Keys to Remote Users
In version 1.0.2 (January 2000), the flaw was introduced when the GnuPG code was modified to improve the efficiency of encryption using ElGamal keys.
The vendor reports that ElGamal encrypt-only keys (type 16) are not affected.
The vendor reports that you should immediately revoke your ElGamal signing keys and should not use "ElGamal sign+encrypt keys (type 20)." The vendor indicates that you should consider all material signed or encrypted with such a key as compromised.
www.securitytracker.com /alerts/2003/Nov/1008319.html   (1963 words)

  
 Announce: severe flaws in the ElGamal algorithm of gnupg - Dev Shed
Announce: severe flaws in the ElGamal algorithm of gnupg Security and Cryptography forum discussing issues related to coding, server applications, network protection, data protection, firewalls, ciphers and the like.
If you are using an ElGamal key for encryption or signing with GnuPG, revoke it now.
There is a flaw in the key generation and usage algorithms that allows anyone to get your private key within seconds.
forums.devshed.com /security-and-cryptography-17/announce-severe-flaws-in-the-elgamal-algorithm-of-gnupg-101608.html   (574 words)

  
 [Announce] GnuPG's ElGamal signing keys compromised
Next message: [Announce] GnuPG 1.2.3 patch to remove ElGamal signing keys
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GnuPG's ElGamal signing keys compromised ========================================== Summary ======= Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys for signing.
The mailing list gnupg-users at gnupg.org is the best place to discuss this problem (please subscribe first so you don't need moderator approval [2]).
lists.gnupg.org /pipermail/gnupg-announce/2003q4/000160.html   (1222 words)

  
 ElGamal: key length vs performance | GnuPG | users
As I understand, by default, GunPG uses ElGamal to encrypt/decrypt files,
I am not quite certain where you understand ElGamal is the 'Default'
GnuPG uses Elgamal to encrypt a session key, which
www.gossamer-threads.com /lists/gnupg/users/36489   (566 words)

  
 GnuPG's ElGamal signing keys compromised - The Community's Center for Security
GnuPG's ElGamal signing keys compromised - The Community's Center for Security
Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys for signing.
mykey.asc gpg --keyserver subkeys.pgp.net --send-keys your_keyid If your primary key is not an ElGamal key, you might need to revoke a subkey.
www.linuxsecurity.com /content/view/115065/65   (1391 words)

  
 Elgamal: BCArchive, PlexCrypt Compression-Encryption
You may store all you confidential files in such archive and/or e-mail it to your friend.
PlexCrypt allows set of files or folders to compress and encrypts and decrypts set of files or set of folders based on PKI and Passwords using AES, Blowfish, CAST, DES, ElGamal, IDEA, IES, RC4, RC6, RSA, Serpent, etc.
I have over 30 web sites that require a userid and password.
www.fileedge.com /all/elgamal   (143 words)

  
 rhn.redhat.com | Red Hat Support
Updated gnupg packages are now available for Red Hat Linux.
disable the ability to generate ElGamal keys (used for both signing and
ElGamal keys, when those keys are used both to sign and encrypt data.
rhn.redhat.com /errata/RHSA-2003-390.html   (464 words)

  
 Advisory: Updated gnupg packages disable ElGamal keys
Topic: Updated gnupg packages are now available for Red Hat Linux.
Problem description: GnuPG is a utility for encrypting data and creating digital signatures.
Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied.
www.securityfocus.com /advisories/6160   (638 words)

  
 LWN: GnuPG: ElGamal signing keys compromised   (Site not responding. Last check: 2007-10-04)
What does it mean to join the Software Freedom Conservancy?
A severe vulnerability was discovered in GnuPG by Phong Nguyen relating to ElGamal sign+encrypt keys.
See those quotes from Werner's email (my emphasis):
lwn.net /Articles/60613   (257 words)

  
 LXer: Red Hat alert: Updated gnupg packages disable ElGamal keys
LXer: Red Hat alert: Updated gnupg packages disable ElGamal keys
Red Hat alert: Updated gnupg packages disable ElGamal keys
The key length, type, and ID are listed together, separated by a forward slash.
lxer.com /module/newswire/view/3135   (1040 words)

  
 Search results for 'ElGamal'   (Site not responding. Last check: 2007-10-04)
Academics Technical Report System Main User Login Search Dynamic Elgamal Public Key Generation with Tight Binding R. Poovendran M. Scott Corson John S. Baras Number: CSHCN TR 1999-38 Year
CSHCN TR 99-38: Dynamic Elgamal Public Key Generation with Tight Binding
Dynamic Elgamal Public Key Generation with Tight Binding R. Poovendran, M. Scott Corson, John S. Baras Number: CSHCN TR 99-38 Year:1999 Advisor: John S. Baras Thrust Area: Global Communication Systems Keywords
www.isr.umd.edu /htdig-cgi-bin/htsearch?method=and&format=long&sort=score&config=cshcn&words=ElGamal&restrict=CSHCN   (336 words)

Try your search on: Qwika (all wikis)

Factbites
  About us   |   Why use us?   |   Reviews   |   Press   |   Contact us  
Copyright © 2005-2007 www.factbites.com Usage implies agreement with terms.