computational Diffie–Hellman problem