A Variant of the Cramer-Shoup Cryptosystem for Groups of Unknown Order

  • Authors:
  • Stefan Lucks

  • Affiliations:
  • -

  • Venue:
  • ASIACRYPT '02 Proceedings of the 8th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

The Cramer-Shoup cryptosystem for groups of prime order is a practical public-key cryptosystem, provably secure in the standard model under standard assumptions. This paper extends the cryptosystem for groups of unknown order, namely the group of quadratic residues modulo a composed N. Two security results are: In the standard model, the scheme is provably secure if both the Decisional Diffie-Hellman assumption for QRN and the factorisation assumption for N hold. In the random oracle model, the scheme is provably secure under the factorisation assumption by a quite efficient reduction.