0
$\begingroup$

Recently, I studied about Cramer-Shoup encryption scheme. Then, I read a book which mentioned a simpler version of this scheme, the Cramer-Shoup Lite encryption scheme. I was wondering if there is somewhere a formal proof of IND-CCA security of Cramer-Shoup Lite encryption scheme. Any help would be appreciated.

$\endgroup$
  • 1
    $\begingroup$ Cramer-Shoup lite is CCA1 secure (not CCA2). $\endgroup$ – Yehuda Lindell Jan 4 at 18:00
  • $\begingroup$ Thank you, I have found that too, but I am trying to find a (formal) proof of this. $\endgroup$ – user178592 Jan 4 at 18:13
0
$\begingroup$

It's far from a full proof, but if you use the sketch from Boaz Barak's lecture notes, together with the full proof of the full scheme from the Cramer-Shoup paper, you should be able to work it out.

| improve this answer | |
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.