3 ms·
Re: IND-CCA2 security for FHE; you can have constructions which achieve it in suitably (Eg from iO: https://cybersecurity.springeropen.com/articles/10.1186/s424
by Ar-Curunir 6y ago
Re: IND-CCA2 security for FHE; you can have constructions which achieve it in suitably (Eg from iO: https://cybersecurity.springeropen.com/articles/10.1186/s42400-018-0013-8 https://cybersecurity.springeropen.com/articles/10.1186/s424...).
But in general the goal of FHE is at odds with CCA2 security. The latter requires non-malleability, but the point of FHE is to malleate the ciphertext in useful ways.