Why is Rabin Encryption is considered as not CCA secure and how can I prove it? Any example would be helpful.

  • 3
    $\begingroup$ What research have you already done? What is your definition of Rabin encryption? What is the definition of CCA security? $\endgroup$ – Squeamish Ossifrage May 7 '18 at 1:20


  • How would a CCA attack on textbook RSA work?
  • Can you somehow modify a given ciphertext so that it is accepted by the decryption oracle while also yielding useful information afterwards?
| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.