Computational Diffie-Hellman assumption