It seems that AES is non homomorphic. I am seeking a public key non homomorphic encryption that has been proved to be such or at least is accepted as non homomorphic. The internet search leads to those that are homomorphic. Any lead?

  • 2
    $\begingroup$ Use any CCA-secure encryption scheme. By definition those cannot have any kind of homomorphism. $\endgroup$
    – Maeher
    Sep 10 '17 at 4:35
  • $\begingroup$ These CCA-secure keyed-homomorphic schemes only allow simple computations on encrypted data, i.e., either adding or multiplying encrypted ciphertexts, but not both operations at the same time. ... Until now, fully homomorphic encryption schemes can only be proven secure against chosen-plaintext attack (CPA).Feb 18, 2016 $\endgroup$
    – Moti
    Sep 10 '17 at 4:41
  • $\begingroup$ I do not want even partial homomorphic encryption $\endgroup$
    – Moti
    Sep 10 '17 at 4:42
  • 4
    $\begingroup$ By definition a CCA secure encryption scheme does not have ANY homomorphism. No matter if full, partial or whatever. Any possible homomorphic evaluation on ciphertexts would immediatelly translate into an attack on the CCA security. $\endgroup$
    – Maeher
    Sep 10 '17 at 4:50
  • 3
    $\begingroup$ RSA with proper padding? $\endgroup$
    – mikeazo
    Sep 10 '17 at 5:39

mikeazo has the answer in a comment:

RSA with proper padding

So, use RSA (or actually any trap door one way function) with proper padding. For instance: OAEP padding. These are designed to achieve indistinguishability, which has also been mentioned in the comments. The padding which uses a hash internally kills all homomorphic properties of the cipher.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.