Timeline for Probabilistic RSA, IND CPA
Current License: CC BY-SA 3.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 1, 2015 at 22:45 | comment | added | poncho | Pretty much it. Actually, if you want to make it a bit simpler, you can just compute $M^{e^2}A - B^e$; that's 0 for any $M$ with this method. However, your observation suffices for showing that this is not IND-CPA | |
| Dec 1, 2015 at 22:12 | history | answered | Timo Junolainen | CC BY-SA 3.0 |