Decision Linear assumption

The Decisional Linear (DLIN) assumption is a mathematic assumption used in elliptic curve cryptography. In particular the DLIN assumption is often used in settings in which the Decisional Diffie-Hellman assumption does not hold, as is often the case in Pairing-based cryptography. The Decisional Linear assumption was introduced by Boneh, Boyen, and Shacham .

Informally the DLIN assumption states that it is hard to decide whether a triple $(a,b,c)=(f^{x},h^{y},g^{z})$ has the property that $x+y=z$.