As I was reading on some encryption schemes the other day, I stumbled upon the Blum–Goldwasser cryptosystem and read that it is vulnerable to adaptive chosen ciphertext attack.
I searched for some actual example but could not find any, so I thought asking here for anyone willing to provide a simple proof of concept chosen ciphertext attack on the Blum–Goldwasser cryptosystem. Thanks in advance!

  • $\begingroup$ The cryptosystems ultimately in a stream cipher like fashion, have a look at the security of similar schemes and see if you can adapt those? For example, the CTR mode for blockciphers. And if you are lucky, you may even find the answer on this server! $\endgroup$ Commented Aug 23, 2023 at 16:02
  • $\begingroup$ Found a similar post : https://crypto.stackexchange.com/q/6395/116220. You may also go through the section "Security and efficiency" on the Blum–Goldwasser cryptosystem Wikipedia page. $\endgroup$
    – Mahesh S R
    Commented May 2 at 9:43


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.