Groups from Cyclic Infrastructures and Pohlig-Hellman in Certain Infrastructures

TL;DR

This paper demonstrates that the Pohlig-Hellman algorithm can be adapted to certain cyclic infrastructures, revealing vulnerabilities and guiding cryptographic security considerations in infrastructure-based systems.

Contribution

It extends the applicability of the Pohlig-Hellman method to cyclic infrastructures, generalizing previous results and providing tools to assess their cryptographic security.

Findings

Pohlig-Hellman can be adapted to certain cyclic infrastructures.

Algorithms to test infrastructure suitability for Pohlig-Hellman.

Implications for cryptography based on cyclic infrastructures.

Abstract

In discrete logarithm based cryptography, a method by Pohlig and Hellman allows solving the discrete logarithm problem efficiently if the group order is known and has no large prime factors. The consequence is that such groups are avoided. In the past, there have been proposals for cryptography based on cyclic infrastructures. We will show that the Pohlig-Hellman method can be adapted to certain cyclic infrastructures, which similarly implies that certain infrastructures should not be used for cryptography. This generalizes a result by M\"uller, Vanstone and Zuccherato for infrastructures obtained from hyperelliptic function fields. We recall the Pohlig-Hellman method, define the concept of a cyclic infrastructure and briefly describe how to obtain such infrastructures from certain function fields of unit rank one. Then, we describe how to obtain cyclic groups from discrete cyclic infrastructures and how to apply the Pohlig-Hellman method to compute absolute distances, which is in general a computationally hard problem for cyclic infrastructures. Moreover, we give an algorithm which allows to test whether an infrastructure satisfies certain requirements needed for applying the Pohlig-Hellman method, and discuss whether the Pohlig-Hellman method is applicable in infrastructures obtained from number fields. Finally, we discuss how this influences cryptography based on cyclic infrastructures.