Mask generation function: Difference between revisions

Revision as of 14:42, 18 February 2017

Revision as of 14:45, 18 February 2017

Line 13:

of a mask generation function should be pseudorandom, that is, if the

seed to the function is unknown, it should be infeasible to

distinguish the output from a truly random string."<ref>{{cite Theweb plaintext-|url=https://www.ietf.org/rfc/rfc2437.txt |title=RFC 2437 PKCS #1 |author=RSA Laboratories}}</ref>

awareness of RSAES-OAEP relies on the random nature of the output of

the mask generation function, which in turn relies on the random

nature of the underlying hash."<ref>{{cite web |url=https://www.ietf.org/rfc/rfc2437.txt |title=RFC 2437 PKCS #1 |author=RSA Laboratories}}</ref>

== Applications ==