Talk:Cramer-Shoup cryptosystem

From Wikipedia, the free encyclopedia

You have new messages (last change).

The following is incorrect. Elgamal is also a probabilistic cryptosystem. The advantage of Cramer-Shoup is the verification stage in the decryption algorithm:

In contrast to ElGamal, which is extremely malleable, Cramer-Shoup introduces a random element into the encryption process, such that a given plaintext will produce different ciphertexts on subsequent runs of the system. The consequence is that, unlike ElGamal and RSA (without padding), Cramer-Shoup is not susceptible to chosen ciphertext attack.

Anyone know the licensing information? This would probably be good to include.--Wpegden 07:07, 16 July 2006 (UTC)

[edit] H(u1, u2, e)

Every cryptographic hash function that I know of takes one argument. How does one pass three arguments? 141.149.207.158 04:17, 27 August 2006 (UTC)

Retrieved from "http://en.wikipedia.org../../../c/r/a/Talk%7ECramer-Shoup_cryptosystem_bb3c.html"