## CryptoDB

### Paper: A New Security Notion for PKC in the Standard Model: Weaker, Simpler, and Still Realizing Secure Channels

Authors: Wasilij Beskorovajnov , FZI Research Center for Information Technology, Karlsruhe, Germany Roland Gröll , FZI Research Center for Information Technology, Karlsruhe, Germany Jörn Müller-Quade , Karlsruhe Institute of Technology, Karlsruhe, Germany; FZI Research Center for Information Technology, Karlsruhe, Germany Astrid Ottenhues , Karlsruhe Institute of Technology, Karlsruhe, Germany Rebecca Schwerdt , Karlsruhe Institute of Technology, Karlsruhe, Germany Search ePrint Search Google Slides PKC 2022 Encryption satisfying CCA2 security is commonly known to be unnecessarily strong for realizing secure channels. Moreover, CCA2 constructions in the standard model are far from being competitive practical alternatives to constructions via random oracle. A promising research area to alleviate this problem are weaker security notions—like IND-RCCA secure encryption or IND-atag-wCCA secure tag-based encryption—which are still able to facilitate secure message transfer (SMT) via authenticated channels. In this paper we introduce the concept of sender-binding encryption (SBE), unifying prior approaches of SMT construction in the universal composability (UC) model. We furthermore develop the corresponding non-trivial security notion of IND-SB-CPA and formally prove that it suffices for realizing SMT in conjunction with authenticated channels. Our notion is the weakest so far in the sense that it can be generically constructed from the weakest prior notions—RCCA and atag-wCCA—without additional assumptions, while the reverse is not true. A direct consequence is that IND-stag-wCCA, which is strictly weaker than IND-atag-wCCA but stronger than our IND-SB-CPA, can be used to construct a secure channel. Finally, we give an efficient IND-SB-CPA secure construction in the standard model from IND-CPA secure double receiver encryption (DRE) based on McEliece. This shows that IND-SB-CPA security yields simpler and more efficient constructions in the standard model than the weakest prior notions, i.e., IND-atag-wCCA and IND-stag-wCCA.
##### BibTeX
@inproceedings{pkc-2022-31708,
title={A New Security Notion for PKC in the Standard Model: Weaker, Simpler, and Still Realizing Secure Channels},
publisher={Springer-Verlag},
author={Wasilij Beskorovajnov and Roland Gröll and Jörn Müller-Quade and Astrid Ottenhues and Rebecca Schwerdt},
year=2022
}