comment
Why not consider modification in ciphertext part in identity-based encryption
@ArtjomB. I ask here because I think some other people will know about something that I don't know or something I have wrongly misunderstood. Main point is why they do not consider and not why they publish. Just querying my thinking.
awarded
comment
Security (CPA?,CCA?) in Authenticated identity-based encryption
Artjom B. In the above problem, if $t=a$ then, the attacker achieves in decryption oracle. As $s$ value is given, the problem lies in finding $a$ value. Can you please explain suitable assumption for finding value of $e(d_{A},ID_{B})$ , given $ID_{A},ID_{B}$??
comment
Security (CPA?,CCA?) in Authenticated identity-based encryption
Artjom B. Can you please explain suitable assumption for finding value of $e(d_{A},ID_{B})$ , given $ID_{A},ID_{B}$??
revised
Security (CPA?,CCA?) in Authenticated identity-based encryption
added 155 characters in body
Loading…
comment
Which one is correct probability formula for the same master secret value in identity-based encryption
$$\begin{eqnarray} & = & 1 - (\frac{q}{q} - \frac{1}{q}) \\ & = & \frac{1}{q} \approx 0. \end{eqnarray}$$ As I calculated the parenthesis first. $\frac{q-1}{q}$ That is why I got (1-0.9=0.1)
Loading…
comment
Possibility for same Private Key Generation in identity-based encryption
Artjom B. why $2^{170}!$ ? In the formula described above, just $r$! I wanna know substituted value in p(n) formula.
comment
Possibility for same Private Key Generation in identity-based encryption
Artjom B. Can you please explain calculating the probability? I can't get that answer. $3.10^{-42}$. Suppose server 2 wants to try to get the same master secret key with server 1 without notice of server 1. First, it will get private key corresponding to ID1 from server 1. And then, it may try repeatedly to get the same private key using ID1. Is it easy or not?
comment
Possibility for same Private Key Generation in identity-based encryption
fgrieu. What about the case of IBE servers that are not well-behaving? In such cases, security risk?
awarded
comment
Possibility for same Private Key Generation in identity-based encryption
ArtjomB. Can that probability cause weak security?
comment
Possibility for same Private Key Generation in identity-based encryption
If so, in real applications, if two servers use the same domain curve parameters, is the security weak?