2
$\begingroup$

Gen generates Pk and Sk (l bits each), Enc encrypts m (length l) but by bit using each bit of Pk respectively, Dec decrypts ciphertext bit by bit using each bit of Sk respectively. How do I prove this scheme is not IND-CCA-2 secure?

Improve this question
$\endgroup$
1
  • $\begingroup$ ... You find a CCA attack against the scheme, and show that the attack works. ​ ​ $\endgroup$
    – user991
    Dec 6, 2015 at 8:30

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.