ElGamal → IND-CPA (PKE)

ElGamal is IND-CPA secure if the DDH assumption holds.

Parameters

$\mathcal{G}$: Group used in ElGamal -> IND-CPA (DDH)

Concept

Specification: ElGamal

ElGamal.$\mathcal{G}$ = $\mathcal{G}$

Implication

Indistinguishable PKE under chosen-plaintext attacks (IND-CPA (PKE))