Timeline for consequences of using fixed values with OAEP
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 6, 2019 at 22:47 | vote | accept | neubert | ||
| Jun 9, 2019 at 15:07 | comment | added | Squeamish Ossifrage | This is not peculiar to OAEP—public-key encryption is necessarily randomized to defeat a mere CPA or even KPA distinguisher. (The same is not so for signatures: e.g., Ed25519 is a deterministic function of the signing key and message, and there are also VRFs which come with a verifiable proof of determinism. RSA-PSS has a funny history with randomization; more details.) | |
| Jun 9, 2019 at 5:31 | history | answered | Meir Maor | CC BY-SA 4.0 |