ElGamal on elliptic curves