The Kurosawa-Desmedt key encapsulation is not chosen-ciphertext secure
scientific article; zbMATH DE number 5773820