Let and You may assume that is prime and is a primitive root mod
Suppose Alice and Bob are carrying out the Diffie-Hellman protocol with these parameters. As a first step, Alice sends Bob and Bob sends Alice where and are secret positive integers less than known only to Alice and Bob, respectively.
An eavesdropper Eve knows the values of and , and sees the transmissions. In particular, she sees that Alice sends Bob the number and Bob sends Alice the number What can Eve deduce about and quickly? (That is, much more quickly than computing and --please don't compute and to solve the problem!)
This section requires Javascript.
You are seeing this because something didn't load right. We suggest you, (a) try
refreshing the page, (b) enabling javascript if it is disabled on your browser and,
finally, (c)
loading the
non-javascript version of this page
. We're sorry about the hassle.
5 is a Primitive root (mod 10007) . Thus, ord 1 0 0 0 7 5 = 1 0 0 0 6 .
Hence, 5 x ≡ 1 (mod 10007) ⇒ 10006 | x .
Since 1 0 0 0 6 = 2 × 5 0 0 3 ,
5 5 0 0 3 m ≡ 2 5 0 0 3 ≡ 1 (mod 10007) if m is even and 5 5 0 0 3 m ≡ 2 5 0 0 3 ≡ − 1 (mod 10007) if m is odd.
5 5 0 0 3 n ≡ 3 5 0 0 3 ≡ 1 (mod 10007) if n is even and 5 5 0 0 3 n ≡ 3 5 0 0 3 ≡ − 1 (mod 10007) if n is odd.
Euler's criterion tells that ( 1 0 0 0 7 2 ) L ≡ 2 5 0 0 3 (mod 10007) and ( 1 0 0 0 7 3 ) L ≡ 3 5 0 0 3 (mod 10007) .
Second Supplement to Quadratic Reciprocity tells that ( 1 0 0 0 7 2 ) L = 1 , since 1 0 0 0 7 ≡ − 1 (mod 8) .
Law of Quadratic Reciprocity tells that ( 1 0 0 0 7 3 ) L = ( 3 − 1 0 0 0 7 ) L = ( 3 1 ) L = 1 , since 1 0 0 0 7 ≡ 3 (mod 4) and 3 ≡ 3 (mod 4) .
Thus, 2 5 0 0 3 ≡ 3 5 0 0 3 ≡ 1 (mod 10007) .
Since 2 5 0 0 3 ≡ 1 (mod 10007) and 3 5 0 0 3 ≡ 1 (mod 10007) , m, n are both even .