Optimal asymmetric encryption padding: Difference between revisions

Revision as of 19:57, 5 March 2008

Revision as of 19:57, 5 March 2008

Line 31:

# The output is X || Y where X is shown in the diagram as the leftmost block and Y as the rightmost block.

# Then X = m00..0 ⊕ G(r)and Y = r ⊕ H(X)

# To decode, recover the random string as r = yY ⊕ H(X) then the message as m00..0 = X ⊕ G(r)

==References==