Talk:Cramer-Shoup cryptosystem

From Wikipedia, the free encyclopedia

The following is incorrect. Elgamal is also a probabilistic cryptosystem. The advantage of Cramer-Shoup is the verification stage in the decryption algorithm:

In contrast to ElGamal, which is extremely malleable, Cramer-Shoup introduces a random element into the encryption process, such that a given plaintext will produce different ciphertexts on subsequent runs of the system. The consequence is that, unlike ElGamal and RSA (without padding), Cramer-Shoup is not susceptible to chosen ciphertext attack.

Anyone know the licensing information? This would probably be good to include.--Wpegden 07:07, 16 July 2006 (UTC)

[edit] H(u1, u2, e)

Every cryptographic hash function that I know of takes one argument. How does one pass three arguments? 141.149.207.158 04:17, 27 August 2006 (UTC)

It makes a hash of the combination. I guess you could say H(u1 || u2 || e) would do the trick. 129.241.211.76 (talk)