I am new to cryptography and I do not know how to prove the ECB mode is not chosen plaintext attack (CPA) secure.

  • 1
    $\begingroup$ Hint: request $m_1$ and $m_2$ from oracle? That is why we need probabilistic encryption. $\endgroup$ – kelalaka Oct 2 '19 at 14:43
  • $\begingroup$ Which definition(s) of chosen plaintext attack security do you know? $\endgroup$ – SEJPM Oct 2 '19 at 15:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.