crypto: Index | Files

package elgamal

import ""

Package elgamal implements ElGamal encryption, suitable for OpenPGP, as specified in "A Public-Key Cryptosystem and a Signature Scheme Based on Discrete Logarithms," IEEE Transactions on Information Theory, v. IT-31, n. 4, 1985, pp. 469-472.

This form of ElGamal embeds PKCS#1 v1.5 padding, which may make it unsuitable for other protocols. RSA should be used in preference in any case.


Package Files


func Decrypt Uses

func Decrypt(priv *PrivateKey, c1, c2 *big.Int) (msg []byte, err error)

Decrypt takes two integers, resulting from an ElGamal encryption, and returns the plaintext of the message. An error can result only if the ciphertext is invalid. Users should keep in mind that this is a padding oracle and thus, if exposed to an adaptive chosen ciphertext attack, can be used to break the cryptosystem. See “Chosen Ciphertext Attacks Against Protocols Based on the RSA Encryption Standard PKCS #1”, Daniel Bleichenbacher, Advances in Cryptology (Crypto '98),

func Encrypt Uses

func Encrypt(random io.Reader, pub *PublicKey, msg []byte) (c1, c2 *big.Int, err error)

Encrypt encrypts the given message to the given public key. The result is a pair of integers. Errors can result from reading random, or because msg is too large to be encrypted to the public key.

type PrivateKey Uses

type PrivateKey struct {
    X   *big.Int

PrivateKey represents an ElGamal private key.

type PublicKey Uses

type PublicKey struct {
    G, P, Y *big.Int

PublicKey represents an ElGamal public key.

Package elgamal imports 5 packages (graph) and is imported by 12 packages. Updated 2020-10-17. Refresh now. Tools for package owners.