Optimal asymmetric encryption padding: Difference between revisions

Content deleted Content added
Shellreef (talk | contribs)
References: Shoup reference
OAEP modifies the plaintext prior to encryption, not the ciphretext (which obviously does not exist before encryption)
Line 1:
In [[cryptography]], '''Optimal Asymmetric Encryption Padding''' ('''OAEP''') is a [[padding scheme]] often used together with [[RSA encryption]]. The OAEP algorithm is a form of [[feistel network]] which uses a pair of [[random oracle]]s G and H to process athe ciphertextplaintext prior to [[asymmetric encryption]]. When combined with any secure [[trapdoor one-way function]] <math>f</math>, this processing results in a combined scheme which is [[semantic security|semantically secure]] under [[chosen plaintext attack]] (IND-CPA). When implemented with certain trapdoor functions (e.g., RSA-OAEP), OAEP is also secure against [[chosen ciphertext attack]].
 
OAEP satisfies the following two goals: