Daniel Bleichenbacher, Bell Labs
In this talk the ElGamal digital signature scheme will be analyzed.
The ElGamal signature scheme has some flaws. Often the implementors
are not aware of this fact and their implementations are insecure.
Variants of this scheme, which avoid such flaws have been proposed
and recently it was even possible to prove that under certain
assumptions some ElGamal variants secure.