Separating decision Diffie-Hellman from computational Diffie-Hellman in cryptographic groups
scientific article; zbMATH DE number 2102282