RSA-OAEP is secure under the RSA assumption

DOI10.1007/s00145-002-0204-yzbMath1083.68038OpenAlexW2753555060WikidataQ56269076 ScholiaQ56269076MaRDI QIDQ1880404

Tatsuaki Okamoto, Eiichiro Fujisaki, Jacques Stern, David Pointcheval

Publication date: 27 September 2004

Published in: Journal of Cryptology (Search for Journal in Brave)

Full work available at URL: https://doi.org/10.1007/s00145-002-0204-y

zbMATH Keywords

RSAProvable securityOAEPPublic-key encryption

Mathematics Subject Classification ID

Cryptography (94A60) Data encryption (aspects in computer science) (68P25)

Related Items (17)

Toward RSA-OAEP Without Random Oracles ⋮ Post-Quantum Security of the Fujisaki-Okamoto and OAEP Transforms ⋮ Post-quantum Security of Plain OAEP Transform ⋮ Instantiability of RSA-OAEP under chosen-plaintext attack ⋮ On the Security of Distributed Multiprime RSA ⋮ On quantum ciphertext indistinguishability, recoverability, and OAEP ⋮ Instantiability of classical random-oracle-model encryption transforms ⋮ Post-quantum verification of Fujisaki-Okamoto ⋮ Cramer-Shoup Satisfies a Stronger Plaintext Awareness under a Weaker Assumption ⋮ Subtleties in the definition of IND-CCA: when and how should challenge decryption be disallowed? ⋮ The Geometry of Provable Security: Some Proofs of Security in Which Lattices Make a Surprise Appearance ⋮ OAEP Is Secure under Key-Dependent Messages ⋮ Security of Digital Signature Schemes in Weakened Random Oracle Models ⋮ Beyond Provable Security Verifiable IND-CCA Security of OAEP ⋮ Strengthening Security of RSA-OAEP ⋮ On the Security of Padding-Based Encryption Schemes – or – Why We Cannot Prove OAEP Secure in the Standard Model ⋮ A public key cryptosystem based on a subgroup membership problem

This page was built for publication: RSA-OAEP is secure under the RSA assumption