Abstract

Many efficient CCA2-secure hybrid encryption schemes have been proposed, but their securities are based on too strong assumptions. It would be preferable to base a security proof on a weaker assumption, so we describe a practical hybrid encryption scheme based on the weaker LDDH assumption, and in the standard model prove to be CCA2-secure if the LDDH assumption is true.

Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call