Computational Diffie–Hellman problem