3
$\begingroup$

Is there any security compromises if the Paillier system was used to encrypt only binary message in {0, 1}? i.e., plaintexts are either 0 or 1.

$\endgroup$

2 Answers 2

2
$\begingroup$

No, there are no security compromises; the Pallier system remains secure. Both messages are in the supported message space and as Paillier encryption provides IND-CPA security you are safe when doing this.

$\endgroup$
1
$\begingroup$

Let's review the encryption process for Paillier:

  1. Let $m$ be a message to be encrypted where $m\in\mathbb{Z}_n$ (in your case $m\in\{0,1\}$)
  2. Select random $r$ where $r\in\mathbb{Z}_n^*$
  3. Compute ciphertext as: $c=g^m\cdot r^n\bmod{n^2}$

It is that random value $r$ that makes it so that encrypting values drawn from a small plaintext space does not have security issues. The encryption process is randomized. So, an attacker would either have to break the cipher given just the public key and the ciphertext, or guess the randomness. Both will be extremely hard.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.