Tagged Questions
0
votes
1answer
65 views
Why is Blum-Goldwasser not IND-CCA-2 secure?
Consider the Blum-Goldwasser encryption scheme as described on Wikipedia. I was told that it was not IND-CCA-2 secure.
I heard there was malleabilty, probably it has to do with XOR-ing. But I do not ...