Talk:GGH encryption scheme

Wrong result in subsection Decryption
As the result to obtain the message the formula
 * $$ m = m \cdot U \cdot U^{-1} $$

is given. This looks dubious to me. It bugs me that m is on both sides where as the cyphertext c is missing. Doing some fairly trivial transformations of the other formula above this one (and applying the Babai rounding technique (BRT)) I get:
 * $$ c \cdot B^{-1} = m \cdot U $$

which is then transformed to
 * $$ c \cdot B^{-1} \cdot U^{-1} = m \cdot U \cdot U^{-1} = m $$

I am by no meas an expert of cryptography and I do not know the BRT, but doing the straightforward transformations and using the BRT as seems to be intended I obtained a result which looks like it makes much more sense than the current one.

Spynacker (talk) 09:38, 8 September 2013 (UTC)