ElGamal encryption and Cramer-Shoup encryption comparison