Talk:GGH encryption scheme

Wrong result in subsection Decryption

As the result to obtain the message the formula

$m=m\cdot U\cdot U^{-1}$

is given. This looks dubious to me. It bugs me that m is on both sides where as the cyphertext c is missing. Doing some fairly trivial transformations of the other formula above this one (and applying the Babai rounding technique (BRT)) I get:

$c\cdot B^{-1}=m\cdot U$

which is then transformed to

$c\cdot B^{-1}\cdot U^{-1}=m\cdot U\cdot U^{-1}=m$

I am by no meas an expert of cryptography and I do not know the BRT, but doing the straightforward transformations and using the BRT as seems to be intended I obtained a result which looks like it makes much more sense than the current one.

Spynacker (talk) 09:38, 8 September 2013 (UTC)