The DDH assumption states that it is hard to distinguish between tuples of the form (G, xG, yG, xyG) and (G, xG, yG, zG) for random x, y, z.
Group (Group)