Content deleted Content added
Adding local short description: "Scheme often used with RSA encryption", overriding Wikidata description "padding scheme often used together with RSA encryption; a form of Feistel network which uses a pair of random oracles to process the plaintext prior to asymmetric encryption; introduced by Bellare and Rogaway; standardized in PKCS#1 v2 and RFC 2437" |
mNo edit summary |
||
Line 2:
{{redirect|OAEP|the division of the Thailand Ministry of Science Technology and Environment previously known as the Office of Atomic Energy for Peace|Office of Atoms for Peace}}
In [[cryptography]], '''Optimal Asymmetric Encryption Padding''' ('''OAEP''') is a [[padding (cryptography)|padding scheme]] often used together with [[RSA (
The OAEP algorithm is a form of [[Feistel network]] which uses a pair of [[random oracle]]s G and H to process the plaintext prior to [[asymmetric encryption]]. When combined with any secure [[trapdoor one-way function|trapdoor one-way permutation]] <math>f</math>, this processing is proved in the [[random oracle model]] to result in a combined scheme which is [[semantic security|semantically secure]] under [[chosen plaintext attack]] [[ciphertext indistinguishability|(IND-CPA)]]. When implemented with certain trapdoor permutations (e.g., RSA), OAEP is also proven to be secure against [[chosen ciphertext attack]]. OAEP can be used to build an [[all-or-nothing transform]].
| |||