0
$\begingroup$

This question is about the security of public-key ciphers when related plaintexts are encrypted by the same encryption key. Take Paillier for example. I know that Paillier is semantically secure under the DCRA. Now a sequence of related plaintexts are encrypted by Paillier with the same encryption key, but for each of the plaintexts, a fresh randomness is used in the encryption. The attacker does not know the values of the plaintexts, but he knows the relation between them. The attacker eavesdrops the ciphertexts of the sequence of plaintexts. An extreme case is that the sequence of plaintexts is the same one, in which case the attacker obtains multiple ciphertexts of a single plaintext and he knows this. Will security be reduced in this case where the attacker knows the relation between the plaintexts?

$\endgroup$

1 Answer 1

0
$\begingroup$

Look at the definition of semantic security. It is for this exact reason that auxiliary information is modeled in the definition. This ensures that nothing is revealed even when the attacker knows partial information.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.