3 ms·
Why does lack of CCA security make FHE unattractive? The entire point of FHE is to allow malleability of ciphertexts.
by Ar-Curunir 8y ago
Why does lack of CCA security make FHE unattractive? The entire point of FHE is to allow malleability of ciphertexts.
- CiPHPerCoder 8y agoCCAs have historically been useful for defeating the confidentiality guarantees of cryptography protocols. BB'98, Vaudenay '02, the iMessage attack, etc. Selling "encryption, but not IND-CCA3" to a lot of (clueful, at least) companies is almost impossible. If you read the linked article, it discusses a way to hack it in.