We compare the relative strengths of popular notions of security for public key encryption schemes. We consider the goals of privacy and non-malleability, each under chosen plaintext attack and two kinds of chosen ciphertext attack. For each of the resulting pairs of definitions we prove either an implication (every scheme meeting one notion must meet the other) or a separation (there is a scheme meeting one notion but not the other, assuming the first notion can be met at all). We similarly treat plaintext awareness, a notion of security in the random oracle model. An additional contribution of this paper is a new definition of non-malleability which we believe is simpler than the previous one.
Beschreibung
Relations among notions of security for public-key encryption schemes | SpringerLink
%0 Conference Paper
%1 10.1007/BFb0055718
%A Bellare, Mihir
%A Desai, Anand
%A Pointcheval, David
%A Rogaway, Phillip
%B Advances in Cryptology --- CRYPTO '98
%C Berlin, Heidelberg
%D 1998
%E Krawczyk, Hugo
%I Springer Berlin Heidelberg
%K cryptography
%P 26--45
%T Relations among notions of security for public-key encryption schemes
%X We compare the relative strengths of popular notions of security for public key encryption schemes. We consider the goals of privacy and non-malleability, each under chosen plaintext attack and two kinds of chosen ciphertext attack. For each of the resulting pairs of definitions we prove either an implication (every scheme meeting one notion must meet the other) or a separation (there is a scheme meeting one notion but not the other, assuming the first notion can be met at all). We similarly treat plaintext awareness, a notion of security in the random oracle model. An additional contribution of this paper is a new definition of non-malleability which we believe is simpler than the previous one.
%@ 978-3-540-68462-6
@inproceedings{10.1007/BFb0055718,
abstract = {We compare the relative strengths of popular notions of security for public key encryption schemes. We consider the goals of privacy and non-malleability, each under chosen plaintext attack and two kinds of chosen ciphertext attack. For each of the resulting pairs of definitions we prove either an implication (every scheme meeting one notion must meet the other) or a separation (there is a scheme meeting one notion but not the other, assuming the first notion can be met at all). We similarly treat plaintext awareness, a notion of security in the random oracle model. An additional contribution of this paper is a new definition of non-malleability which we believe is simpler than the previous one.},
added-at = {2019-08-23T07:35:48.000+0200},
address = {Berlin, Heidelberg},
author = {Bellare, Mihir and Desai, Anand and Pointcheval, David and Rogaway, Phillip},
biburl = {https://www.bibsonomy.org/bibtex/216a93d3ea620e20bbb392020ca4cd013/ndbunner},
booktitle = {Advances in Cryptology --- CRYPTO '98},
description = {Relations among notions of security for public-key encryption schemes | SpringerLink},
editor = {Krawczyk, Hugo},
interhash = {6f4cb5a8cbb5ae08f60cc19214c16bb8},
intrahash = {16a93d3ea620e20bbb392020ca4cd013},
isbn = {978-3-540-68462-6},
keywords = {cryptography},
pages = {26--45},
publisher = {Springer Berlin Heidelberg},
timestamp = {2019-08-23T07:35:48.000+0200},
title = {Relations among notions of security for public-key encryption schemes},
year = 1998
}