| A Practical Approach to Attaining Chosen Ciphertext Security |
| |
| 作者姓名： | LI Jun CUI Guohua YANG Muxiang |
| |
| 作者单位： | College of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan 430074, Hubei, China |
| |
| 摘 要： | Strong security in public key cryptography is not enongh; the encryption has to be achieved in an efficient way. OAEP or SAEP is only suitable for special applications （e. g. key transport）, and securely transporting message of any length is a challenge. Motivated by the hybrid encryption, we present a practical approach to achieve the （adaptively） chosen eiphertext security. The time cost of encryption/decryption of proposed scheme is similar to OAEP and the bandwidth of message recovery is 92% for standard security parameter, while RSA-OAEP is 84%. The scheme is also provably secure against adaptively chosen ciphertext attacks in the random oracle model. We conclude that the approach is practical in more extensive application.
|
| 关 键 词： | 公钥加密 选择密文安全 随机预言者模型 信息恢复带宽 |
| 文章编号： | 1007-1202（2006）06-1601-04 |
| 收稿时间： | 2006-05-30 |
A practical approach to attaining chosen ciphertext security |
| |
| LI Jun CUI Guohua YANG Muxiang.A Practical Approach to Attaining Chosen Ciphertext Security[J].Wuhan University Journal of Natural Sciences,2006,11(6):1601-1604. |
| |
| Authors: | Li Jun Cui Guohua Yang Muxiang |
| |
| Institution: | (1) College of Computer Science and Technology, Huazhong University of Science and Technology, 430074 Wuhan, Hubei, China |
| |
| Abstract: | Strong security in public key cryptography is not enough; the encryption has to be achieved in an efficient way. OAEP or SAEP is only suitable for special applications (e.g. key transport), and securely transporting message of any length is a challenge. Motivated by the hybrid encryption, we present a practical approach to achieve the (adaptively) chosen ciphertext security. The time cost of encryption/decryption of proposed scheme is similar to OAEP and the bandwidth of message recovery is 92% for standard security parameter, while RSA-OAEP is 84%. The scheme is also provably secure against adaptively chosen ciphertext attacks in the random oracle model. We conclude that the approach is practical in more extensive application. |
| |
| Keywords: | public-key encryption chosen ciphertext security random oracle model bandwidth of message recovery |
| 本文献已被 CNKI 维普 万方数据 SpringerLink 等数据库收录！ |
