Back to Documentation

Algebraic Entropy Foundation

Group-Theoretic Entropy and Mathematical Foundations

2.1 Group-Theoretic Entropy

Let G be a cyclic group of prime order q with generators g, h. The initial randomness pool is defined as:

S0 = {s_i ∈ G | H_α(s_i) ≥ H_min}

where Hα denotes the Rényi entropy of order α > 1. Sampling from S0 produces elements indistinguishable from uniform under the discrete-log assumption.

2.2 Entropy Bounds and Security

Formal results on random walks in groups yield asymptotic lower bounds:

Hα(S0) ≥ log q - O(1)

This guarantees that an adversary gains negligible advantage even after observing polynomially many epochs.

Rényi Entropy

A generalization of Shannon entropy that measures the uncertainty in a probability distribution. For order α > 1, it provides stronger security guarantees than standard entropy measures.

Discrete Logarithm

The computational hardness assumption that finding x given g^x in a cyclic group G is computationally infeasible. This forms the basis for many cryptographic protocols.

Mathematical Properties

Cyclic Group Structure

The group G = ⟨g⟩ where |G| = q (prime) ensures that every element can be expressed as gk for some k ∈ ℤq.

Entropy Preservation

The Rényi entropy Hα provides a measure of randomness that is preserved under group operations, ensuring cryptographic security.

Sampling Guarantees

Elements sampled from S0 are computationally indistinguishable from uniform random elements in G, providing perfect hiding properties.

Security Implications

  • • Computational indistinguishability from uniform distribution
  • • Resistance to statistical attacks through high entropy
  • • Quantum-resistant properties under certain group choices
  • • Forward secrecy through entropy evolution
Thank You

Special thanks to the community members and selfless volunteers who contributed reviews, feedback, and technical insights to make this documentation possible.

Błażej and Jai Santos
Cryptographic ReviewersProtocol Contributors