New answers tagged


It's possible to have a secure encryption scheme that ignores the first half of its key, and a secure OWF that leaks the entire second half of its input. Composing them as in your question results in something profoundly insecure.

Top 50 recent answers are included