Hot answers tagged

1

To the best of my knowledge, there is no padded scheme for RSA (or general trapdoor permutation) that has been proven secure in the standard model. To be exact, let's call a padded scheme one where a padding transformation is carried out independently of the public key, and then the trapdoor permutation is applied once to the result. Of course, as noted, we ...



Only top voted, non community-wiki answers of a minimum length are eligible