0
$\begingroup$

If we have a key encapsulation mechanism (KEM) that is IND-CPA secure, with some error probability $P_e$ (probability that the shared keys are not equal).

The goal is to use the Fujisaki-Okamoto transformation to obtain an IND-CCA security.

Does this transformation effect the error probability?

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.