Ontology type: schema:ScholarlyArticle Open Access: True
2016-09-19
AUTHORSEike Kiltz, Adam O’Neill, Adam Smith
ABSTRACTWe show that the widely deployed RSA-OAEP encryption scheme of Bellare and Rogaway (Eurocrypt 1994), which combines RSA with two rounds of an underlying Feistel network whose hash ( i.e., round) functions are modeled as random oracles, meets indistinguishability under chosen-plaintext attack (IND-CPA) in the standard model based on simple, non-interactive, and non-interdependent assumptions on RSA and the hash functions. To prove this, we first give a result on a more general notion called “padding-based” encryption, saying that such a scheme is IND-CPA if (1) its underlying padding transform satisfies a “fooling" condition against small-range distinguishers on a class of high-entropy input distributions, and (2) its trapdoor permutation is sufficiently lossy as defined by Peikert and Waters (STOC 2008). We then show that the first round of OAEP satisfies condition (1) if its hash function is t-wise independent for t roughly proportional to the allowed message length. We clarify that this result requires the hash function to be keyed, and for its key to be included in the public key of RSA-OAEP. We also show that RSA satisfies condition (2) under the Φ\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\Phi $$\end{document}-Hiding Assumption of Cachin et al. (Eurocrypt 1999). This is the first positive result about the instantiability of RSA-OAEP. In particular, it increases confidence that chosen-plaintext attacks are unlikely to be found against the scheme. In contrast, RSA-OAEP’s predecessor in PKCS #1 v1.5 was shown to be vulnerable to such attacks by Coron et al. (Eurocrypt 2000). More... »
PAGES889-919
http://scigraph.springernature.com/pub.10.1007/s00145-016-9238-4
DOIhttp://dx.doi.org/10.1007/s00145-016-9238-4
DIMENSIONShttps://app.dimensions.ai/details/publication/pub.1035989082
JSON-LD is the canonical representation for SciGraph data.
TIP: You can open this SciGraph record using an external JSON-LD service: JSON-LD Playground Google SDTT
[
{
"@context": "https://springernature.github.io/scigraph/jsonld/sgcontext.json",
"about": [
{
"id": "http://purl.org/au-research/vocabulary/anzsrc-for/2008/08",
"inDefinedTermSet": "http://purl.org/au-research/vocabulary/anzsrc-for/2008/",
"name": "Information and Computing Sciences",
"type": "DefinedTerm"
},
{
"id": "http://purl.org/au-research/vocabulary/anzsrc-for/2008/0804",
"inDefinedTermSet": "http://purl.org/au-research/vocabulary/anzsrc-for/2008/",
"name": "Data Format",
"type": "DefinedTerm"
}
],
"author": [
{
"affiliation": {
"alternateName": "Ruhr-Universit\u00e4t Bochum, Bochum, Germany",
"id": "http://www.grid.ac/institutes/grid.5570.7",
"name": [
"Ruhr-Universit\u00e4t Bochum, Bochum, Germany"
],
"type": "Organization"
},
"familyName": "Kiltz",
"givenName": "Eike",
"id": "sg:person.011110230247.96",
"sameAs": [
"https://app.dimensions.ai/discover/publication?and_facet_researcher=ur.011110230247.96"
],
"type": "Person"
},
{
"affiliation": {
"alternateName": "Georgetown University, Washington, DC, USA",
"id": "http://www.grid.ac/institutes/grid.213910.8",
"name": [
"Georgetown University, Washington, DC, USA"
],
"type": "Organization"
},
"familyName": "O\u2019Neill",
"givenName": "Adam",
"id": "sg:person.014355003777.71",
"sameAs": [
"https://app.dimensions.ai/discover/publication?and_facet_researcher=ur.014355003777.71"
],
"type": "Person"
},
{
"affiliation": {
"alternateName": "Pennsylvania State University, University Park, PA, USA",
"id": "http://www.grid.ac/institutes/grid.29857.31",
"name": [
"Pennsylvania State University, University Park, PA, USA"
],
"type": "Organization"
},
"familyName": "Smith",
"givenName": "Adam",
"id": "sg:person.013307226666.21",
"sameAs": [
"https://app.dimensions.ai/discover/publication?and_facet_researcher=ur.013307226666.21"
],
"type": "Person"
}
],
"citation": [
{
"id": "sg:pub.10.1007/3-540-48910-x_28",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1017908723",
"https://doi.org/10.1007/3-540-48910-x_28"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-540-89255-7_21",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1015069617",
"https://doi.org/10.1007/978-3-540-89255-7_21"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-642-54631-0_22",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1003820973",
"https://doi.org/10.1007/978-3-642-54631-0_22"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/s00145-002-0133-9",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1030924084",
"https://doi.org/10.1007/s00145-002-0133-9"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-642-10366-7_31",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1030652162",
"https://doi.org/10.1007/978-3-642-10366-7_31"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/s001459900030",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1004544479",
"https://doi.org/10.1007/s001459900030"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-662-46494-6_25",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1042535398",
"https://doi.org/10.1007/978-3-662-46494-6_25"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/3-540-45353-9_12",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1023039026",
"https://doi.org/10.1007/3-540-45353-9_12"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-540-85174-5_8",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1004916209",
"https://doi.org/10.1007/978-3-540-85174-5_8"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/s00145-002-0204-y",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1037088098",
"https://doi.org/10.1007/s00145-002-0204-y"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-642-14623-7_16",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1003428365",
"https://doi.org/10.1007/978-3-642-14623-7_16"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/3-540-45708-9_15",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1032928311",
"https://doi.org/10.1007/3-540-45708-9_15"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-642-38348-9_4",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1041449845",
"https://doi.org/10.1007/978-3-642-38348-9_4"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-540-74143-5_30",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1002281087",
"https://doi.org/10.1007/978-3-540-74143-5_30"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/3-540-47721-7_27",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1021006744",
"https://doi.org/10.1007/3-540-47721-7_27"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-642-40084-1_23",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1021415438",
"https://doi.org/10.1007/978-3-642-40084-1_23"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/11535218_25",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1049732998",
"https://doi.org/10.1007/11535218_25"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/11935230_14",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1053291772",
"https://doi.org/10.1007/11935230_14"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/3-540-44987-6_19",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1015139947",
"https://doi.org/10.1007/3-540-44987-6_19"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-642-01001-9_23",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1041093246",
"https://doi.org/10.1007/978-3-642-01001-9_23"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/11535218_27",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1034562243",
"https://doi.org/10.1007/11535218_27"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/bfb0053428",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1035370576",
"https://doi.org/10.1007/bfb0053428"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/11935230_17",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1045271661",
"https://doi.org/10.1007/11935230_17"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/bfb0052255",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1033233326",
"https://doi.org/10.1007/bfb0052255"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-540-30539-2_4",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1044260446",
"https://doi.org/10.1007/978-3-540-30539-2_4"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-642-21969-6_6",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1002272846",
"https://doi.org/10.1007/978-3-642-21969-6_6"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/3-540-44647-8_17",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1048442413",
"https://doi.org/10.1007/3-540-44647-8_17"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-540-70583-3_37",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1006236942",
"https://doi.org/10.1007/978-3-540-70583-3_37"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/0-387-34799-2_20",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1007936646",
"https://doi.org/10.1007/0-387-34799-2_20"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-662-46494-6_24",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1039851442",
"https://doi.org/10.1007/978-3-662-46494-6_24"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/3-540-45539-6_25",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1000220017",
"https://doi.org/10.1007/3-540-45539-6_25"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/3-540-46766-1_35",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1038119898",
"https://doi.org/10.1007/3-540-46766-1_35"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-540-45238-6_14",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1045341369",
"https://doi.org/10.1007/978-3-540-45238-6_14"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/s00145-011-9112-3",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1019545133",
"https://doi.org/10.1007/s00145-011-9112-3"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/3-540-45682-1_5",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1013919939",
"https://doi.org/10.1007/3-540-45682-1_5"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-642-03356-8_37",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1011646169",
"https://doi.org/10.1007/978-3-642-03356-8_37"
],
"type": "CreativeWork"
},
{
"id": "sg:pub.10.1007/978-3-540-85174-5_19",
"sameAs": [
"https://app.dimensions.ai/details/publication/pub.1048809352",
"https://doi.org/10.1007/978-3-540-85174-5_19"
],
"type": "CreativeWork"
}
],
"datePublished": "2016-09-19",
"datePublishedReg": "2016-09-19",
"description": "We show that the widely deployed RSA-OAEP encryption scheme of Bellare and Rogaway (Eurocrypt 1994), which combines RSA with two rounds of an underlying Feistel network whose hash ( i.e., round) functions are modeled as random oracles, meets indistinguishability under chosen-plaintext attack (IND-CPA) in the standard model based on simple, non-interactive, and non-interdependent assumptions on RSA and the hash functions. To prove this, we first give a result on a more general notion called \u201cpadding-based\u201d encryption, saying that such a scheme is IND-CPA if (1) its underlying padding transform satisfies a \u201cfooling\" condition against small-range distinguishers on a class of high-entropy input distributions, and (2) its trapdoor permutation is sufficiently lossy as defined by Peikert and Waters (STOC 2008). We then show that the first round of OAEP satisfies condition (1) if its hash function is t-wise independent for t roughly proportional to the allowed message length. We clarify that this result requires the hash function to be keyed, and for its key to be included in the public key of RSA-OAEP. We also show that RSA satisfies condition (2) under the \u03a6\\documentclass[12pt]{minimal}\n\t\t\t\t\\usepackage{amsmath}\n\t\t\t\t\\usepackage{wasysym}\n\t\t\t\t\\usepackage{amsfonts}\n\t\t\t\t\\usepackage{amssymb}\n\t\t\t\t\\usepackage{amsbsy}\n\t\t\t\t\\usepackage{mathrsfs}\n\t\t\t\t\\usepackage{upgreek}\n\t\t\t\t\\setlength{\\oddsidemargin}{-69pt}\n\t\t\t\t\\begin{document}$$\\Phi $$\\end{document}-Hiding Assumption of Cachin et al.\u00a0(Eurocrypt 1999). This is the first positive result about the instantiability of RSA-OAEP. In particular, it increases confidence that chosen-plaintext attacks are unlikely to be found against the scheme. In contrast, RSA-OAEP\u2019s predecessor in PKCS #1 v1.5 was shown to be vulnerable to such attacks by Coron et al.\u00a0(Eurocrypt 2000).",
"genre": "article",
"id": "sg:pub.10.1007/s00145-016-9238-4",
"inLanguage": "en",
"isAccessibleForFree": true,
"isFundedItemOf": [
{
"id": "sg:grant.3082012",
"type": "MonetaryGrant"
},
{
"id": "sg:grant.3084991",
"type": "MonetaryGrant"
},
{
"id": "sg:grant.3092817",
"type": "MonetaryGrant"
},
{
"id": "sg:grant.3798711",
"type": "MonetaryGrant"
},
{
"id": "sg:grant.7553629",
"type": "MonetaryGrant"
},
{
"id": "sg:grant.3063698",
"type": "MonetaryGrant"
}
],
"isPartOf": [
{
"id": "sg:journal.1136278",
"issn": [
"0933-2790",
"1432-1378"
],
"name": "Journal of Cryptology",
"publisher": "Springer Nature",
"type": "Periodical"
},
{
"issueNumber": "3",
"type": "PublicationIssue"
},
{
"type": "PublicationVolume",
"volumeNumber": "30"
}
],
"keywords": [
"hash function",
"chosen-plaintext attack",
"RSA-OAEP",
"first positive results",
"positive results",
"RSA-OAEP encryption scheme",
"encryption scheme",
"random oracles",
"IND-CPA",
"first round",
"public key",
"such attacks",
"plaintext attack",
"Feistel network",
"trapdoor permutations",
"message length",
"Cachin et al",
"Coron et al",
"attacks",
"scheme",
"RSA",
"function",
"v1.5",
"rounds",
"encryption",
"input distribution",
"instantiability",
"Bellare",
"Rogaway",
"network",
"oracle",
"results",
"general notion",
"Peikert",
"key",
"Hiding Assumption",
"contrast",
"indistinguishability",
"conditions",
"distinguisher",
"length",
"et al",
"confidence",
"PKCs",
"standard model",
"permutations",
"predecessors",
"model",
"assumption",
"notion",
"satisfies",
"class",
"distribution",
"satisfies condition",
"al",
"water"
],
"name": "Instantiability of RSA-OAEP Under Chosen-Plaintext Attack",
"pagination": "889-919",
"productId": [
{
"name": "dimensions_id",
"type": "PropertyValue",
"value": [
"pub.1035989082"
]
},
{
"name": "doi",
"type": "PropertyValue",
"value": [
"10.1007/s00145-016-9238-4"
]
}
],
"sameAs": [
"https://doi.org/10.1007/s00145-016-9238-4",
"https://app.dimensions.ai/details/publication/pub.1035989082"
],
"sdDataset": "articles",
"sdDatePublished": "2022-06-01T22:15",
"sdLicense": "https://scigraph.springernature.com/explorer/license/",
"sdPublisher": {
"name": "Springer Nature - SN SciGraph project",
"type": "Organization"
},
"sdSource": "s3://com-springernature-scigraph/baseset/20220601/entities/gbq_results/article/article_710.jsonl",
"type": "ScholarlyArticle",
"url": "https://doi.org/10.1007/s00145-016-9238-4"
}
]Download the RDF metadata as: json-ld nt turtle xml License info
JSON-LD is a popular format for linked data which is fully compatible with JSON.
curl -H 'Accept: application/ld+json' 'https://scigraph.springernature.com/pub.10.1007/s00145-016-9238-4'
N-Triples is a line-based linked data format ideal for batch operations.
curl -H 'Accept: application/n-triples' 'https://scigraph.springernature.com/pub.10.1007/s00145-016-9238-4'
Turtle is a human-readable linked data format.
curl -H 'Accept: text/turtle' 'https://scigraph.springernature.com/pub.10.1007/s00145-016-9238-4'
RDF/XML is a standard XML format for linked data.
curl -H 'Accept: application/rdf+xml' 'https://scigraph.springernature.com/pub.10.1007/s00145-016-9238-4'
This table displays all metadata directly associated to this object as RDF triples.
294 TRIPLES
22 PREDICATES
118 URIs
73 LITERALS
6 BLANK NODES