Key Size Evaluation of Provably Secure RSA-based Encryption Schemes
スポンサーリンク
概要
- 論文の詳細を見る
Recently studies on asymmetric encryption schemes with proven security are very active. Among them, RSA-based schemes are practically most important. As such we have, the most popular OAEP, OAEP+, SAEP, SAEP+, REACT and so on. These schemes are proven semantically secure against adaptive chosen-ciphertext attack (denoted IND-CCA , which is the strongest security) under the random oracle model, on the RSA assumption. To assure the practical security theoretically, (for instance, to establish the security equivalent to the complexity of 1024 bits-long integer factorization), we must quantitatively estimate the exact key size needed for each scheme through the reduction. But this is not well studied until now. Therefore in this paper we estimate the exact key size needed by each scheme in order to theoretically guarantee security, based on the precise evaluation of the reduction efficiency. We compare the results among the schemes, and conclude that REACT is assured theoretical security with the shortest (almost minimum necessary) key size.
- お茶の水女子大学の論文
著者
-
Okamoto Tatsuaki
Ntt Information Sharing Platform Laboratories
-
Nakashima Takako
Graduate School of Humanities and Sciences, Ochanomizu University
-
Nakashima Takako
Graduate School Of Humanities And Sciences Ochanomizu University:(present Office)the Japan Research Institute Limited
関連論文
- Chosen Ciphertext Security with Optimal Ciphertext Overhead
- Delegation Chains Secure up to Constant Length(Special Section on Cryptography and Information Security)
- Key Size Evaluation of Provably Secure RSA-based Encryption Schemes