Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

After-the-Fact Leakage in Public-Key Encryption

Shai Halevi, Huijia Lin

Published Jan 1, 2011• 89 citations
Publisher
DOI
10.1007/978-3-642-19571-6_8

Related papers

Post-challenge leakage in public-key encryption

Zongyang Zhang, Sherman S. M. Chow, Zhenfu Cao

Theoretical Computer Science•Jan 16, 2015•12 citations

public-Key Encryption Resilient to Randomness Leakage.

圭介 田中, Keisuke Tanaka, 均 並木 +3 more

•Jan 1, 2010•0 citations

On the Leakage Resilience of Ring-LWE Based Public Key Encryption

Dana Dachman-Soled, Huijing Gong, Mukul Kulkarni +1 more

•Jan 1, 2017•0 citations

Public Key Encryption Resilient to Post-challenge Leakage and Tampering Attacks

Suvradip Chakraborty, Chandrasekharan Pandu Rangan

Lecture notes in computer science•Jan 1, 2019•4 citations

On the Leakage Resilience of Ideal-Lattice Based Public Key Encryption.

Dana Dachman-Soled, Huijing Gong, Mukul Kulkarni +1 more

•Jan 1, 2017•5 citations

CCA Secure Public Key Encryption against After-the-Fact Leakage without NIZK Proofs

Yi Zhao, Kaitai Liang, Bo Yang +1 more

In leakage resilient cryptography, there is a seemingly inherent restraint on the ability of the adversary that it cannot get access to the leakage oracle after the challenge. Recently, a series of works made a breakthrough to consider a postchallenge leakage. They presented achievable public key encryption (PKE) schemes which are semantically secure against after-the-fact leakage in the split-state model. This model puts a more acceptable constraint on adversary’s ability that the adversary cannot query the leakage of secret states as a whole but the functions of several parts separately instead of prechallenge query only. To obtain security against chosen ciphertext attack (CCA) for PKE schemes against after-the-fact leakage attack (AFL), existing works followed the paradigm of “double encryption” which needs noninteractive zero knowledge (NIZK) proofs in the encryption algorithm. We present an alternative way to achieve AFL-CCA security via lossy trapdoor functions (LTFs) without NIZK proofs. First, we formalize the definition of LTFs secure against AFL (AFLR-LTFs) and all-but-one variants (ABO). Then, we show how to realize this primitive in the split-state model. This primitive can be used to construct AFLR-CCA secure PKE scheme in the same way as the method of “CCA from LTFs” in traditional sense.

Security and Communication Networks•Oct 31, 2019•1 citation
In leakage resilient cryptography, there is a seemingly inherent restraint on the ability of the adversary that it cannot get access to the leakage oracle after the challenge. Recently, a series of works made a breakthrough to consider a postchallenge leakage. They presented achievable public key encryption (PKE) schemes which are semantically secure against after-the-fact leakage in the split-state model. This model puts a more acceptable constraint on adversary’s ability that the adversary cannot query the leakage of secret states as a whole but the functions of several parts separately instead of prechallenge query only. To obtain security against chosen ciphertext attack (CCA) for PKE schemes against after-the-fact leakage attack (AFL), existing works followed the paradigm of “double encryption” which needs noninteractive zero knowledge (NIZK) proofs in the encryption algorithm. We present an alternative way to achieve AFL-CCA security via lossy trapdoor functions (LTFs) without NIZK proofs. First, we formalize the definition of LTFs secure against AFL (AFLR-LTFs) and all-but-one variants (ABO). Then, we show how to realize this primitive in the split-state model. This primitive can be used to construct AFLR-CCA secure PKE scheme in the same way as the method of “CCA from LTFs” in traditional sense.