Timeline for semantic security of RSA variant
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 27, 2016 at 10:04 | comment | added | tylo | "most widespread definition of "secure" for PKE schemes" I would not agree with that. IND-CPA has its value, especially since it allows (semi-)homomorphic encryption schemes. (the positive side of malleability). Also IND-CPA is a good abstraction for symmetric encryption with proper mode-of-operation (but, that's not PKE). And I don't think there are that many practical IND-CCA2 schemes besides the case of RSA-OAEP. For ElGamal, according to this question even CCA1 seems to be an open question. | |
| Oct 27, 2016 at 7:35 | history | edited | Elias | CC BY-SA 3.0 |
added 512 characters in body
|
| Oct 26, 2016 at 15:29 | history | answered | Elias | CC BY-SA 3.0 |