Paper 2005/261 Original: eprint.iacr.org/2005/261 ↗
The Cramer-Shoup Encryption Scheme is Plaintext Aware in the Standard Model
Abstract
In this paper we examine the security criteria for a KEM and a DEM that are su±cient for the overall hybrid encryption scheme to be plaintext-aware in the standard model. We apply this theory to the Cramer-Shoup hybrid scheme acting on ¯xed length messages and deduce that the Cramer-Shoup scheme is plaintext-aware in the standard model. This answers a previously open conjecture of Bellare and Palacio on the existence of plaintext-aware encryption schemes.
Metadata
- Available format(s)
PDF- Category
- Public-key cryptography
- Publication info
- Preprint.
- History
- 2006-04-21: last updated
- 2005-08-11: published
- Short URL
- https://ia.cr/2005/261
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2005/261,
author = {Alexander W. Dent},
title = {The Cramer-Shoup Encryption Scheme is Plaintext Aware in the Standard Model},
howpublished = {Cryptology {ePrint} Archive, Paper 2005/261},
year = {2005},
url = {https://eprint.iacr.org/2005/261}
}