Discrete logarithm assumption