So it turns out to prove the chosen ciphertext security of ElGamal we actually need a stronger assumption, Hash Diffie-Hellman or Computational Diffie-Hellman are actually not enough to prove chosen ciphertext security of the system as far as we know. 