%0 Conference Paper %1 10.1007/BFb0054135 %A Okamoto, Tatsuaki %A Uchiyama, Shigenori %B Advances in Cryptology --- EUROCRYPT'98 %C Berlin, Heidelberg %D 1998 %E Nyberg, Kaisa %I Springer Berlin Heidelberg %K cryptography %P 308--318 %T A new public-key cryptosystem as secure as factoring %X This paper proposes a novel public-key cryptosystem, which is practical, provably secure and has some other interesting properties as follows:1.Its trapdoor technique is essentially different from any other previous schemes including RSA-Rabin and Diffie-Hellman.2.It is a probabilistic encryption scheme.3.It can be proven to be as secure as the intractability of factoring n = p2q (in the sense of the security of the whole plaintext) against passive adversaries.4.It is semantically secure under the p-subgroup assumption, which is comparable to the quadratic residue and higher degree residue assumptions.5.Under the most practical environment, the encryption and decryption speeds of our scheme are comparable to (around twice slower than) those of elliptic curve cryptosystems.6.It has a homomorphic property: E(m0, r0)E(m1, r1) mod n = E(@\#@ m0 + m1, r2), where E(m, r) means a ciphertext of plaintext m as randomized by r and m0+ m1 < p.7.Anyone can change a ciphertext, C = E(m, r), into another ciphertext, C´x = Chr' mod n, while preserving plaintext of C (i.e., C´x = E(m,r˝)), and the relationship between C and C´x can be concealed. %@ 978-3-540-69795-4

@inproceedings{10.1007/BFb0054135, abstract = {This paper proposes a novel public-key cryptosystem, which is practical, provably secure and has some other interesting properties as follows:1.Its trapdoor technique is essentially different from any other previous schemes including RSA-Rabin and Diffie-Hellman.2.It is a probabilistic encryption scheme.3.It can be proven to be as secure as the intractability of factoring n = p2q (in the sense of the security of the whole plaintext) against passive adversaries.4.It is semantically secure under the p-subgroup assumption, which is comparable to the quadratic residue and higher degree residue assumptions.5.Under the most practical environment, the encryption and decryption speeds of our scheme are comparable to (around twice slower than) those of elliptic curve cryptosystems.6.It has a homomorphic property: E(m0, r0)E(m1, r1) mod n = E(@{\#}@ m0 + m1, r2), where E(m, r) means a ciphertext of plaintext m as randomized by r and m0+ m1 < p.7.Anyone can change a ciphertext, C = E(m, r), into another ciphertext, C{\textasciiacutex} = Chr' mod n, while preserving plaintext of C (i.e., C{\textasciiacutex} = E(m,r{\textacutedbl})), and the relationship between C and C{\textasciiacutex} can be concealed.}, added-at = {2019-08-27T02:48:16.000+0200}, address = {Berlin, Heidelberg}, author = {Okamoto, Tatsuaki and Uchiyama, Shigenori}, biburl = {https://www.bibsonomy.org/bibtex/2d9550a9b7ee0d66282d57108c8da9b2a/ndbunner}, booktitle = {Advances in Cryptology --- EUROCRYPT'98}, description = {A new public-key cryptosystem as secure as factoring | SpringerLink}, editor = {Nyberg, Kaisa}, interhash = {fa5edce0f7979442251c33ff9eb05b9f}, intrahash = {d9550a9b7ee0d66282d57108c8da9b2a}, isbn = {978-3-540-69795-4}, keywords = {cryptography}, pages = {308--318}, publisher = {Springer Berlin Heidelberg}, timestamp = {2019-08-27T02:48:16.000+0200}, title = {A new public-key cryptosystem as secure as factoring}, year = 1998 }