Difference between revisions 7281518 and 7756871 on simplewiki

< previous diff
next diff >
Chosen-ciphertext attack
{{complex|date=December 2011}}
A '''chosen-ciphertext attack (CCA)''' is an [[attack model]] for [[cryptanalysis]] in which the cryptanalyst gathers information, at least in part, by choosing a [[ciphertext]] and obtaining its decryption under an unknown key.  

(contracted; show full)

Cryptosystems proven secure against adaptive chosen-ciphertext attacks include the [[Cramer-Shoup system]]<ref name="CS" /> and [[RSA-OAEP]].<ref>
⏎
⏎
[[Mihir Bellare|M. Bellare]], [[Phillip Rogaway|P. Rogaway]]. ''Optimal Asymmetric Encryption -- How to encrypt with RSA''.  Extended abstract in Advances in Cryptology - [[Eurocrypt]] '94 Proceedings, Lecture Notes in Computer Science Vol. 950, A. De Santis ed, [[Springer-Verlag]], 1995.  [http://www-cse.ucsd.edu/users/mihir/papers/oae.pdf full version (pdf)] {{Webarchive|url=https://web.archive.org/web/20080708233234/http://www-cse.ucsd.edu/users/mihir/papers/oae.pdf |date=2008-07-08 }}</ref>  

==Related pages==
* [[Ciphertext-only attack]]
* [[Chosen-plaintext attack]]
* [[Known-plaintext attack]]

==References==
{{reflist}}

[[Category:Cryptography]]