Optimal asymmetric encryption padding: Difference between revisions

Revision as of 16:25, 6 July 2013

Revision as of 17:29, 13 November 2013

Line 18:

D. Brown, [http://eprint.iacr.org/2006/223 ''What Hashes Make RSA-OAEP Secure?''], IACR ePrint 2006/233.</ref>

== Diagram of OAEP ==

[[Image:Oaep-diagram-20080305.png|thumb|250px|right|OAEP Diagram]]

Line 42 ⟶ 41:

The "[[All-or-nothing transform|all-or-nothing]]" security is from the fact that to recover m, you must recover the entire X and the entire Y; X is required to recover r from Y, and r is required to recover m from X. Since any changed bit of a cryptographic hash completely changes the result, the entire X, and the entire Y must both be completely recovered.

==See also==

* [[Key encapsulation]]

==References==

<references/>

==See also==

* [[Key encapsulation]]

{{Cryptography navbox | public-key}}