Prime-order DDH ⇒ DDH

Fully-black-box reduction · standard model · folklore · security loss: none

Statement

A group generator for which DDH is hard in prime-order groups is one for which DDH is hard, with the same advantage — folklore.