Decisional Diffie-Hellman assumption