On the key-exchange protocol using real quadratic fields

Abstract

To prevent an exhaustive key-search attack of the key-exchange protocol using real quadratic fields, we need to ensure that the number l of reduced principal ideals in K is sufficiently large. In this paper we present an example of a family which are not valid for this protocol.