Journal
SIAM JOURNAL ON COMPUTING
Volume 30, Issue 2, Pages 391-437Publisher
SIAM PUBLICATIONS
DOI: 10.1137/S0097539795291562
Keywords
cryptography; cryptanalysis; encryption; authentication; randomized algorithms; nonmalleability; chosen ciphertext security; auction protocols; commitment schemes; zero-knowledge
Ask authors/readers for more resources
The notion of nonmalleable cryptography, an extension of semantically secure cryptography, is defined. Informally, in the context of encryption the additional requirement is that given the ciphertext it is impossible to generate a different ciphertext so that the respective plaintexts are related. The same concept makes sense in the contexts of string commitment and zero-knowledge proofs of possession of knowledge. Nonmalleable schemes for each of these three problems are presented. The schemes do not assume a trusted center; a user need not know anything about the number or identity of other system users. Our cryptosystem is the rst proven to be secure against a strong type of chosen ciphertext attack proposed by Racko and Simon, in which the attacker knows the ciphertext she wishes to break and can query the decryption oracle on any ciphertext other than the target.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available