Suppose RSA-OEAP is used, where the hash function G has a bug and outputs the all zero
Fantastic news! We've Found the answer you've been seeking!
Question:
Suppose RSA-OEAP is used, where the hash function G has a bug and outputs the all zero string.
Show how an attacker can (with probability at least 1/2) break the IND-CCA security of RSA in this case.
Related Book For
Fundamentals of Database Systems
ISBN: 978-0136086208
6th edition
Authors: Ramez Elmasri, Shamkant Navathe
Posted Date: