New answers tagged chosen-ciphertext-attack
0
It's far from a full proof, but if you use the sketch from Boaz Barak's lecture notes, together with the full proof of the full scheme from the Cramer-Shoup paper, you should be able to work it out.
Top 50 recent answers are included
