schemes also provide indistinguishability under chosen ciphertext attack and adaptive chosen ciphertext attack. Indistinguishability under chosen plaintext...

Computational indistinguishability Ciphertext indistinguishability Indistinguishability obfuscation Topological indistinguishability Indistinguishable processes...

cryptography, security against adaptive chosen-ciphertext attacks is commonly modeled using ciphertext indistinguishability (IND-CCA2). Bleichenbacher, Daniel (August...

security is equivalent to another definition of security called ciphertext indistinguishability under chosen-plaintext attack. This latter definition is more...

Modern ciphers aim to provide semantic security, also known as ciphertext indistinguishability under chosen-plaintext attack, and they are therefore, by design...

schemes are pseudorandom permutations and are designed to have ciphertext indistinguishability. If an algorithm is found that can distinguish the output from...

(however, most modern schemes contain more rigorous defences; see ciphertext indistinguishability). This is of course desirable for those sending messages and...

the information, known as plaintext, into an alternative form known as ciphertext. Despite its goal, encryption does not itself prevent interference but...

its ciphertext, even given access to the public encryption key. This guarantee is known as semantic security or ciphertext indistinguishability, and...

Rubber-hose cryptanalysis Provable security Random oracle model Ciphertext indistinguishability Semantic security Malleability Forward secrecy Forward anonymity...

in a ciphertext which is twice as large as in ElGamal. The definition of security achieved by Cramer–Shoup is formally termed "indistinguishability under...

• CipherSaber • Ciphertext expansion • Ciphertext indistinguishability • Ciphertext-only attack • Ciphertext stealing • CIPHERUNICORN-A • CIPHERUNICORN-E...

stronger definitions (such as semantic security or indistinguishability under adaptive chosen ciphertext attack) are appropriate. However, there are special...

the plaintext using the key to produce ciphertext C, and computes an authentication tag T from the ciphertext and the associated data (which remains unencrypted)...

uses more robust notions of security. Recently, indistinguishability under adaptive chosen-ciphertext attack (IND-CCA2 security) has become the "golden...

and Phelix. Distinguishing attack Pseudorandom permutation Ciphertext indistinguishability Elena Andreeva; Andrey Bogdanov; Bart Mennink (8 July 2014)...

about a plaintext given a ciphertext can also be learnt from a randomly-sampled string (of the same length as ciphertexts) that is independent of the...

holder of the ciphertext will not be able to differentiate between the true plaintext, and the bogus-claim plaintext. In general, one ciphertext cannot be...

{sk}},c)=k} . Security of a KEM is quantified by its indistinguishability against chosen-ciphertext attack, IND-CCA, which is loosely how much better an...

converting readable information (plaintext) to unintelligible nonsense text (ciphertext), which can only be read by reversing the process (decryption). The sender...

provide indistinguishability against chosen plaintext attacks since the process of encryption is deterministic. An adversary, given a ciphertext and a candidate...

objects. These primitives include fully homomorphic encryption, indistinguishability obfuscation, cryptographic multilinear maps, and functional encryption...

many times to repeat this loop. The ciphertext output is a binary byte stream that is designed to be "indistinguishable from random noise". For use with...

cipher is a truly random permutation on the mappings between plaintext and ciphertext. If a distinguishing algorithm exists that achieves significant advantage...

of random data (an unbreakable cipher like the one-time pad generates ciphertexts that look perfectly random without the private key). Examples of this...

Strong secrecy is related with the concept of semantic security or indistinguishability used in the computational proof-based approach. Bruno Blanchet provides...

transparency is a shared random pad, and another transparency acts as the ciphertext. Normally, there is an expansion of space requirement in visual cryptography...

In other words, any message having extra zeros at the end makes it indistinguishable from the one without them. To prevent this situation, the first bit...

XTS-Advanced Encryption Standard (XEX-based Tweaked CodeBook mode (TCB) with ciphertext stealing (CTS); the proper name should be XTC (XEX TCB CTS), but that...

to model an idealized block cipher. A random permutation decrypts each ciphertext block into one and only one plaintext block and vice versa, so there is...