Documentation ¶
Overview ¶
Package elgamal implements ElGamal encryption, suitable for OpenPGP, as specified in "A Public-Key Cryptosystem and a Signature Scheme Based on Discrete Logarithms," IEEE Transactions on Information Theory, v. IT-31, n. 4, 1985, pp. 469-472.
This form of ElGamal embeds PKCS#1 v1.5 padding, which may make it unsuitable for other protocols. RSA should be used in preference in any case.
Deprecated: this package was only provided to support ElGamal encryption in OpenPGP. The github.com/utilitywarehouse/energy-crypto/openpgp package is now deprecated (see https://golang.org/issue/44226), and ElGamal in the OpenPGP ecosystem has compatibility and security issues (see https://eprint.iacr.org/2021/923). Moreover, this package doesn't protect against side-channel attacks.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Decrypt ¶
func Decrypt(priv *PrivateKey, c1, c2 *big.Int) (msg []byte, err error)
Decrypt takes two integers, resulting from an ElGamal encryption, and returns the plaintext of the message. An error can result only if the ciphertext is invalid. Users should keep in mind that this is a padding oracle and thus, if exposed to an adaptive chosen ciphertext attack, can be used to break the cryptosystem. See “Chosen Ciphertext Attacks Against Protocols Based on the RSA Encryption Standard PKCS #1”, Daniel Bleichenbacher, Advances in Cryptology (Crypto '98),
Types ¶
type PrivateKey ¶
PrivateKey represents an ElGamal private key.