Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In a paper it says "In the generic group model, the PRF is adaptively secure for inputs of $\mathbb{Z}_q^n$". Maybe a stupid question, but what does "adaptively secure" mean exactly?

share|improve this question
up vote 7 down vote accepted

Well, when we talk about "chosen plaintext attacks", there are two possible flavors for this attack:

  • The attacker gets to create a list of plaintexts to be encrypted; we'll go through and encrypt them all, and then hand over all the ciphertexts to the attacker.

  • The attacker gets to ask for a plaintext to be encrypted; we encrypt it and hand over that ciphertext. Based on what the ciphertext looks like, he can then select another plaintext for us to encrypt (and we'll go through the procedure for a number of plaintext/ciphertext pairs).

This second model is known as "adaptively chosen plaintext attack" model, because the attacker can adapt the plaintext he selects based on previous results. This is a strictly stronger attack model than the "nonadaptive" attack model, where we insist that the attacker gives us all the plaintext up front before we give him anything. "Adaptively secure" means that it is secure within this attack model.

Nowadays, this distinction is a bit obscure, mostly because we really don't have much use for a cryptographical primitive that is secure only in the nonadaptive model; hence a "chosen plaintext attack" typically does mean "adaptively chosen plaintext attack". However, the terminology does turn up when we're being precise.

share|improve this answer
I suppose the same distinction could be made for chosen-ciphertext attacks. – Paŭlo Ebermann Apr 10 '13 at 17:36
@PaŭloEbermann: absolutely. I mentioned chosen-plaintext attack because user4811 mentioned that this was in the context of a PRF. – poncho Apr 10 '13 at 18:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.