[PDF] Top 20 Constructions Secure against Receiver Selective Opening and Chosen Ciphertext Attacks

... IND-RSO-CPA secure scheme to be IND-RSO-CCA secure, one should handle decryption queries ...IND-RSO-CPA secure scheme as the secret key for the whole encryption ...CPA secure scheme, an ... See full document

... scheme secure against chosen-ciphertext attack (NC-CCA) and proved that NC-CCA security implies secu- rity against selective opening chosen-ciphertext attack ... See full document

... scheme secure against leakage-resilient chosen-ciphertext attacks (LR-CCA), from any Hash Proof System (HPS) and any one-time lossy filter ...Efficient constructions of HPSs and ... See full document

... considering Selective Opening (SO) attacks in a multi-user ...SO attacks consider the corruptions of some fraction of users and the extortions of their secret ...SO attacks, SO security ... See full document

... is secure against chosen-plaintext attacks (CPAs), and the 4-round version is secure against chosen-ciphertext attacks ...consider attacks in the ... See full document

... indicate selective identity security and ‘aID’ is used to indicate security against adaptive-identity ...for chosen ciphertext attack whereas ‘CPA’ stands for chosen plaintext ...proved ... See full document

... schemes secure in the standard model against chosen-ciphertext attacks ...concrete chosen-plaintext secure (CPA-secure) ABE schemes to achieve more efficient ... See full document

... under selective opening attack (SOA) whose security is almost-tightly related to a set of computational ...SOA secure IBE and Hofheinz, Koch, and Striecks’ technique [PKC, 2015] on building ... See full document

... Selective opening attacks (SOA) concern a multi-user scenario, where an adversary breaks into a subset of honestly created ciphertexts and tries to learn information on the plaintexts of some ... See full document

... IND-ID-CPA secure and “One-Sided Publicly Openable” (1SPO) IBE ...SIM-SO-CPA secure IBE schemes. The second SIM-SO-CPA secure IBE scheme proposed in [3] can be extended to construct the first ... See full document

... is secure against adversaries with classical encryption oracle access, under the LWE ...three constructions described above, one can use the decryption oracle to build an associated oracle for a ... See full document

... KDM secure under chosen-plaintext attacks (KDM-CPA-secure) in the standard model, under the Decisional Diffie-Hellman (DDH) ...scheme secure under messages that arbitrarily depend on ... See full document

... a ciphertext under a specified access policy into the one under another access policy, she could meet her intentions without giving her secret key to either the mail server or ...especially Ciphertext- ... See full document

... Open question. The primary open question is to figure out the relations between SIM-NM-SO and IND-NM-SO security notions. The barriers we encounter are as follows. For NM security notions, there is always a parallel ... See full document

... is secure against the replay attack, the impersonation attack, the stolen-verifier attack, the man-in-middle attack, and the Denning-Sacco attack; (6) even if the smart card was stolen, it still could ... See full document

... a ciphertext is associated with a set of ...in ciphertext-policy ABE (CP-ABE) [2, 3, 4], a ciphertext is associated with an access policy over attributes, while a secret key is associated with a set ... See full document

... addition, we propose an improved protocol exploiting lightweight PRNGs same as AKARI-1 and AKARI-2. We also prove both using formal and informal methods that our scheme solves its predecessor weaknesses and is resistant ... See full document

... possible attacks to analyze the security of Compact-LWE, Liu, Li, Kim and Nepal [10] thought that the special construction of Compact- LWE makes it immune to all lattice-based ... See full document

... environments, private key exposure seems to be inevitable. Actually, it is much easier for an adversary to obtain the private key from a naive user than to break the computational assumption on which the cryptosystem is ... See full document

... “Adaptive Chosen Ciphertext Attack Security with Glass box Decryption”, which captures the attack by RAM ...CPA secure scheme to a CCA2 secure scheme in the random oracle ...CPA secure ... See full document