Paper 2001/110
RSA hybrid encryption schemes
Louis Granboulan
Abstract
This document compares the two published RSA-based hybrid encryption schemes having linear reduction in their security proof: RSA-KEM with DEM1 and RSA-REACT. While the performance of RSA-REACT is worse than the performance of RSA-KEM+DEM1, a complete proof of its security has already been published. This is indeed an advantage, because we show that the security result for RSA-KEM+DEM1 has a small hole. We provide here a complete proof of the security of RSA-KEM+DEM1. We also propose some changes to RSA-REACT to improve its efficiency without changing its security, and conclude that this new RSA-REACT is a generalisation of RSA-KEM+DEM1, with at most the same security, and with possibly worse performance. Therefore we show that RSA-KEM+DEM1 should be preferred to RSA-REACT.
Metadata
- Available format(s)
- PS
- Category
- Public-key cryptography
- Publication info
- Published elsewhere. Unknown where it was published
- Keywords
- RSA hybrid encryption scheme
- Contact author(s)
- Louis Granboulan @ ens fr
- History
- 2001-12-21: revised
- 2001-12-19: received
- See all versions
- Short URL
- https://ia.cr/2001/110
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2001/110,
author = {Louis Granboulan},
title = {{RSA} hybrid encryption schemes},
howpublished = {Cryptology {ePrint} Archive, Paper 2001/110},
year = {2001},
url = {https://eprint.iacr.org/2001/110}
}
