Content deleted Content added
m Feistel is the last name of Horst Feistel, the inventor of the Feistel network, so "feistel network" is incorrect. Capitalization fix |
updated title of reference |
||
Line 15:
More recent work has shown that in the standard model (that is, when hash functions are not modelled as random oracles), that it is impossible to prove the IND-CCA2 security of RSA-OAEP under the assumed hardness of the [[RSA problem]].<ref>
P. Paillier and J. Villar, ''Trading One-Wayness against Chosen-Ciphertext Security in Factoring-Based Encryption'', Advances in Cryptology -- [[Asiacrypt]] 2006.</ref><ref>
D. Brown, [http://eprint.iacr.org/2006/223 ''
==References==
| |||