Twisted Edwards DLOG ⇒ Prime-order DLOG

Fully-black-box reduction · standard model · folklore · security loss: none

Statement

A group generator for which DLOG is hard in prime-order subgroups of twisted Edwards curves is one for which DLOG is hard in prime-order groups, with the same advantage — folklore.