Efficient KDM-CCA Secure Public-Key Encryption via Auxiliary-Input Authenticated Encryption

<div>Security proof of <span class="nowrap"><svg height="9.25986pt" id="M1748" style="vertical-align:-0.2455397pt" version="1.1" viewbox="-0.0498162 -9.01432 9.88621 9.25986" width="9.88621pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M421 658C372 683 338 687 289 687C174 687 100 624 100 549C100 458 196 404 336 401C341 401 342 386 347 381V379C196 347 110 258 110 154C110 43 211 -15 326 -15C463 -15 584 71 584 161C584 228 542 276 450 276C352 276 275 206 248 98L269 92C293 177 364 234 433 234C485 234 520 207 520 160C520 131 509 102 485 75C454 40 404 15 336 15C244 15 192 73 192 134C192 220 267 311 387 343C403 334 419 329 440 329C464 329 482 338 482 357C482 377 454 385 407 388C404 392 404 393 403 400C588 413 734 506 734 585C734 633 698 658 634 658C511 658 343 568 332 432C229 432 141 472 141 546C141 610 204 657 301 657C356 657 372 656 411 640L421 658ZM693 588C693 524 566 441 403 430C416 521 546 621 641 621C670 621 693 608 693 588Z" id="g198-6"></path></g></svg>.</span><span class="sans-serif">Encrypt</span> as an entropy filter for concrete monomials <span class="nowrap"><svg height="11.3019pt" id="M1749" style="vertical-align:-5.34099pt" version="1.1" viewbox="-0.0498162 -5.96091 177.726 11.3019" width="177.726pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M483 97L471 123C436 91 401 65 392 65C388 65 384 74 390 106C414 239 444 378 457 429L455 433C444 433 429 436 416 439C392 444 368 448 344 448C281 448 204 415 152 376C71 315 23 205 23 103C23 21 57 -12 85 -12C114 -12 149 6 185 34C231 70 285 119 329 183H331L309 81C292 0 308 -12 326 -12C350 -12 421 24 483 97ZM374 387C370 363 356 291 345 261C315 193 181 50 139 50C124 50 110 71 110 118C110 224 153 331 218 379C238 394 271 402 301 402C329 402 359 394 374 387Z" id="g113-98"></path></g><g transform="matrix(.013,0,0,-0.013,9.486,0)"><path d="M170 255C170 288 146 313 114 313S58 288 58 255C58 221 82 198 114 198S170 221 170 255Z" id="g113-46"></path></g><g transform="matrix(.013,0,0,-0.013,15.355,0)"><path d="M536 404C536 423 520 448 491 448C445 448 398 404 308 283L286 338C255 416 242 448 217 448C182 448 138 402 92 341L111 321C149 368 169 378 178 378C188 378 198 363 214 320L254 212C185 117 138 65 107 65C98 65 85 69 82 75C79 82 73 86 65 86C44 86 23 60 23 39C23 7 44 -12 71 -12C119 -12 168 33 265 177L306 61C321 17 347 -12 373 -12C413 -12 465 33 507 96L491 119C459 84 432 60 413 60C395 60 378 92 358 148L321 250C341 279 369 310 389 332C417 363 439 382 456 382C466 382 475 376 481 368C486 361 492 358 496 358C513 358 536 381 536 404Z" id="g113-121"></path></g><g transform="matrix(.0091,0,0,-0.0091,22.557,3.132)"><path d="M250 606C250 634 233 656 203 656C168 656 146 618 146 593C146 564 169 545 192 545C227 545 250 573 250 606ZM227 95L212 119C187 98 152 71 135 71C129 71 128 78 134 102L207 373C219 418 217 451 194 451C165 451 92 411 30 351L44 326C77 353 106 371 114 371C124 371 121 357 117 341L55 97C32 5 46 -12 70 -12C108 -12 191 51 227 95Z" id="g50-106"></path></g><g transform="matrix(.0065,0,0,-0.0065,25.06,5.233)"><path d="M444 576C444 642 407 670 363 670C327 670 293 660 255 630C198 585 161 518 118 341L103 280C79 258 54 238 25 220L34 188C54 199 77 216 95 230L83 169C70 101 74 55 94 29C115 2 144 -12 179 -12C250 -12 321 34 374 103L355 130C325 100 270 58 221 58C177 58 149 92 170 195L187 280C295 352 444 457 444 576ZM381 574C381 495 267 390 200 337L220 420C259 571 283 629 331 629C361 629 381 607 381 574Z" id="g176-127"></path></g><g transform="matrix(.0091,0,0,-0.0091,28.618,3.132)"><path d="M98 134C72 134 46 117 46 90C46 73 55 65 60 64C95 55 124 32 124 -4C124 -42 95 -68 44 -89L57 -123C122 -104 194 -60 194 22C194 94 136 134 98 134Z" id="g50-45"></path></g><g transform="matrix(.0091,0,0,-0.0091,30.774,3.132)"><path d="M389 0V32C297 38 291 46 291 118V635C234 613 175 595 109 583V556L161 554C203 552 207 547 207 497V118C207 46 201 38 110 32V0H389Z" id="g50-50"></path></g><g transform="matrix(.013,0,0,-0.013,35.738,0)"><path d="M556 393C556 426 537 448 514 448C496 448 478 435 471 420C468 414 462 401 466 394C473 382 480 368 480 346C480 268 392 143 338 67H336C329 163 319 253 309 330S286 448 254 448C215 448 160 383 127 337L143 311C167 344 200 373 208 373S222 365 229 320C246 214 264 66 268 -20C219 -83 131 -171 17 -239L25 -261L137 -235C248 -110 273 -79 335 8C384 77 481 215 520 287C544 332 556 363 556 393Z" id="g113-122"></path></g><g transform="matrix(.0091,0,0,-0.0091,42.68,3.132)"><path d="M250 606C250 634 233 656 203 656C168 656 146 618 146 593C146 564 169 545 192 545C227 545 250 573 250 606ZM227 95L212 119C187 98 152 71 135 71C129 71 128 78 134 102L207 373C219 418 217 451 194 451C165 451 92 411 30 351L44 326C77 353 106 371 114 371C124 371 121 357 117 341L55 97C32 5 46 -12 70 -12C108 -12 191 51 227 95Z" id="g50-106"></path></g><g transform="matrix(.0065,0,0,-0.0065,45.183,5.233)"><path d="M444 576C444 642 407 670 363 670C327 670 293 660 255 630C198 585 161 518 118 341L103 280C79 258 54 238 25 220L34 188C54 199 77 216 95 230L83 169C70 101 74 55 94 29C115 2 144 -12 179 -12C250 -12 321 34 374 103L355 130C325 100 270 58 221 58C177 58 149 92 170 195L187 280C295 352 444 457 444 576ZM381 574C381 495 267 390 200 337L220 420C259 571 283 629 331 629C361 629 381 607 381 574Z" id="g176-127"></path></g><g transform="matrix(.0091,0,0,-0.0091,48.741,3.132)"><path d="M98 134C72 134 46 117 46 90C46 73 55 65 60 64C95 55 124 32 124 -4C124 -42 95 -68 44 -89L57 -123C122 -104 194 -60 194 22C194 94 136 134 98 134Z" id="g50-45"></path></g><g transform="matrix(.0091,0,0,-0.0091,50.898,3.132)"><path d="M389 0V32C297 38 291 46 291 118V635C234 613 175 595 109 583V556L161 554C203 552 207 547 207 497V118C207 46 201 38 110 32V0H389Z" id="g50-50"></path></g><g transform="matrix(.013,0,0,-0.013,55.862,0)"><path d="M536 404C536 423 520 448 491 448C445 448 398 404 308 283L286 338C255 416 242 448 217 448C182 448 138 402 92 341L111 321C149 368 169 378 178 378C188 378 198 363 214 320L254 212C185 117 138 65 107 65C98 65 85 69 82 75C79 82 73 86 65 86C44 86 23 60 23 39C23 7 44 -12 71 -12C119 -12 168 33 265 177L306 61C321 17 347 -12 373 -12C413 -12 465 33 507 96L491 119C459 84 432 60 413 60C395 60 378 92 358 148L321 250C341 279 369 310 389 332C417 363 439 382 456 382C466 382 475 376 481 368C486 361 492 358 496 358C513 358 536 381 536 404Z" id="g113-121"></path></g><g transform="matrix(.0091,0,0,-0.0091,63.064,3.132)"><path d="M250 606C250 634 233 656 203 656C168 656 146 618 146 593C146 564 169 545 192 545C227 545 250 573 250 606ZM227 95L212 119C187 98 152 71 135 71C129 71 128 78 134 102L207 373C219 418 217 451 194 451C165 451 92 411 30 351L44 326C77 353 106 371 114 371C124 371 121 357 117 341L55 97C32 5 46 -12 70 -12C108 -12 191 51 227 95Z" id="g50-106"></path></g><g transform="matrix(.0065,0,0,-0.0065,65.566,5.233)"><path d="M444 576C444 642 407 670 363 670C327 670 293 660 255 630C198 585 161 518 118 341L103 280C79 258 54 238 25 220L34 188C54 199 77 216 95 230L83 169C70 101 74 55 94 29C115 2 144 -12 179 -12C250 -12 321 34 374 103L355 130C325 100 270 58 221 58C177 58 149 92 170 195L187 280C295 352 444 457 444 576ZM381 574C381 495 267 390 200 337L220 420C259 571 283 629 331 629C361 629 381 607 381 574Z" id="g176-127"></path></g><g transform="matrix(.0091,0,0,-0.0091,69.124,3.132)"><path d="M98 134C72 134 46 117 46 90C46 73 55 65 60 64C95 55 124 32 124 -4C124 -42 95 -68 44 -89L57 -123C122 -104 194 -60 194 22C194 94 136 134 98 134Z" id="g50-45"></path></g><g transform="matrix(.0091,0,0,-0.0091,71.281,3.132)"><path d="M414 144C384 79 371 75 317 75H135L276 221C367 316 408 376 408 465C408 570 327 635 237 635C179 635 131 609 100 575L42 494L67 471C94 510 138 565 205 565C277 565 321 517 321 435C321 348 258 270 195 195C146 137 88 81 33 26V0H411C423 44 433 88 446 135L414 144Z" id="g50-51"></path></g><g transform="matrix(.013,0,0,-0.013,76.245,0)"><path d="M556 393C556 426 537 448 514 448C496 448 478 435 471 420C468 414 462 401 466 394C473 382 480 368 480 346C480 268 392 143 338 67H336C329 163 319 253 309 330S286 448 254 448C215 448 160 383 127 337L143 311C167 344 200 373 208 373S222 365 229 320C246 214 264 66 268 -20C219 -83 131 -171 17 -239L25 -261L137 -235C248 -110 273 -79 335 8C384 77 481 215 520 287C544 332 556 363 556 393Z" id="g113-122"></path></g><g transform="matrix(.0091,0,0,-0.0091,83.187,3.132)"><path d="M250 606C250 634 233 656 203 656C168 656 146 618 146 593C146 564 169 545 192 545C227 545 250 573 250 606ZM227 95L212 119C187 98 152 71 135 71C129 71 128 78 134 102L207 373C219 418 217 451 194 451C165 451 92 411 30 351L44 326C77 353 106 371 114 371C124 371 121 357 117 341L55 97C32 5 46 -12 70 -12C108 -12 191 51 227 95Z" id="g50-106"></path></g><g transform="matrix(.0065,0,0,-0.0065,85.689,5.233)"><path d="M444 576C444 642 407 670 363 670C327 670 293 660 255 630C198 585 161 518 118 341L103 280C79 258 54 238 25 220L34 188C54 199 77 216 95 230L83 169C70 101 74 55 94 29C115 2 144 -12 179 -12C250 -12 321 34 374 103L355 130C325 100 270 58 221 58C177 58 149 92 170 195L187 280C295 352 444 457 444 576ZM381 574C381 495 267 390 200 337L220 420C259 571 283 629 331 629C361 629 381 607 381 574Z" id="g176-127"></path></g><g transform="matrix(.0091,0,0,-0.0091,89.247,3.132)"><path d="M98 134C72 134 46 117 46 90C46 73 55 65 60 64C95 55 124 32 124 -4C124 -42 95 -68 44 -89L57 -123C122 -104 194 -60 194 22C194 94 136 134 98 134Z" id="g50-45"></path></g><g transform="matrix(.0091,0,0,-0.0091,91.404,3.132)"><path d="M414 144C384 79 371 75 317 75H135L276 221C367 316 408 376 408 465C408 570 327 635 237 635C179 635 131 609 100 575L42 494L67 471C94 510 138 565 205 565C277 565 321 517 321 435C321 348 258 270 195 195C146 137 88 81 33 26V0H411C423 44 433 88 446 135L414 144Z" id="g50-51"></path></g><g transform="matrix(.013,0,0,-0.013,96.368,0)"><path d="M536 404C536 423 520 448 491 448C445 448 398 404 308 283L286 338C255 416 242 448 217 448C182 448 138 402 92 341L111 321C149 368 169 378 178 378C188 378 198 363 214 320L254 212C185 117 138 65 107 65C98 65 85 69 82 75C79 82 73 86 65 86C44 86 23 60 23 39C23 7 44 -12 71 -12C119 -12 168 33 265 177L306 61C321 17 347 -12 373 -12C413 -12 465 33 507 96L491 119C459 84 432 60 413 60C395 60 378 92 358 148L321 250C341 279 369 310 389 332C417 363 439 382 456 382C466 382 475 376 481 368C486 361 492 358 496 358C513 358 536 381 536 404Z" id="g113-121"></path></g><g transform="matrix(.0091,0,0,-0.0091,103.57,3.132)"><path d="M250 606C250 634 233 656 203 656C168 656 146 618 146 593C146 564 169 545 192 545C227 545 250 573 250 606ZM227 95L212 119C187 98 152 71 135 71C129 71 128 78 134 102L207 373C219 418 217 451 194 451C165 451 92 411 30 351L44 326C77 353 106 371 114 371C124 371 121 357 117 341L55 97C32 5 46 -12 70 -12C108 -12 191 51 227 95Z" id="g50-106"></path></g><g transform="matrix(.0065,0,0,-0.0065,106.072,5.233)"><path d="M444 576C444 642 407 670 363 670C327 670 293 660 255 630C198 585 161 518 118 341L103 280C79 258 54 238 25 220L34 188C54 199 77 216 95 230L83 169C70 101 74 55 94 29C115 2 144 -12 179 -12C250 -12 321 34 374 103L355 130C325 100 270 58 221 58C177 58 149 92 170 195L187 280C295 352 444 457 444 576ZM381 574C381 495 267 390 200 337L220 420C259 571 283 629 331 629C361 629 381 607 381 574Z" id="g176-127"></path></g><g transform="matrix(.0091,0,0,-0.0091,109.63,3.132)"><path d="M98 134C72 134 46 117 46 90C46 73 55 65 60 64C95 55 124 32 124 -4C124 -42 95 -68 44 -89L57 -123C122 -104 194 -60 194 22C194 94 136 134 98 134Z" id="g50-45"></path></g><g transform="matrix(.0091,0,0,-0.0091,111.787,3.132)"><path d="M290 377C321 398 342 415 358 430C378 450 389 473 389 502C389 578 329 635 238 635H237C184 635 137 610 109 578L64 515L88 493C112 529 154 573 208 573S303 542 303 482C303 409 233 370 141 341L149 308C165 313 190 319 215 319C272 319 341 283 341 193C342 98 292 43 222 43C163 43 122 72 96 94C88 101 79 100 70 94C61 87 47 73 46 60C44 47 48 37 62 23C76 10 118 -12 165 -12C238 -12 430 62 430 223C430 297 379 359 290 375V377Z" id="g50-52"></path></g><g transform="matrix(.013,0,0,-0.013,116.751,0)"><path d="M556 393C556 426 537 448 514 448C496 448 478 435 471 420C468 414 462 401 466 394C473 382 480 368 480 346C480 268 392 143 338 67H336C329 163 319 253 309 330S286 448 254 448C215 448 160 383 127 337L143 311C167 344 200 373 208 373S222 365 229 320C246 214 264 66 268 -20C219 -83 131 -171 17 -239L25 -261L137 -235C248 -110 273 -79 335 8C384 77 481 215 520 287C544 332 556 363 556 393Z" id="g113-122"></path></g><g transform="matrix(.0091,0,0,-0.0091,123.693,3.132)"><path d="M250 606C250 634 233 656 203 656C168 656 146 618 146 593C146 564 169 545 192 545C227 545 250 573 250 606ZM227 95L212 119C187 98 152 71 135 71C129 71 128 78 134 102L207 373C219 418 217 451 194 451C165 451 92 411 30 351L44 326C77 353 106 371 114 371C124 371 121 357 117 341L55 97C32 5 46 -12 70 -12C108 -12 191 51 227 95Z" id="g50-106"></path></g><g transform="matrix(.0065,0,0,-0.0065,126.195,5.233)"><path d="M444 576C444 642 407 670 363 670C327 670 293 660 255 630C198 585 161 518 118 341L103 280C79 258 54 238 25 220L34 188C54 199 77 216 95 230L83 169C70 101 74 55 94 29C115 2 144 -12 179 -12C250 -12 321 34 374 103L355 130C325 100 270 58 221 58C177 58 149 92 170 195L187 280C295 352 444 457 444 576ZM381 574C381 495 267 390 200 337L220 420C259 571 283 629 331 629C361 629 381 607 381 574Z" id="g176-127"></path></g><g transform="matrix(.0091,0,0,-0.0091,129.753,3.132)"><path d="M98 134C72 134 46 117 46 90C46 73 55 65 60 64C95 55 124 32 124 -4C124 -42 95 -68 44 -89L57 -123C122 -104 194 -60 194 22C194 94 136 134 98 134Z" id="g50-45"></path></g><g transform="matrix(.0091,0,0,-0.0091,131.91,3.132)"><path d="M290 377C321 398 342 415 358 430C378 450 389 473 389 502C389 578 329 635 238 635H237C184 635 137 610 109 578L64 515L88 493C112 529 154 573 208 573S303 542 303 482C303 409 233 370 141 341L149 308C165 313 190 319 215 319C272 319 341 283 341 193C342 98 292 43 222 43C163 43 122 72 96 94C88 101 79 100 70 94C61 87 47 73 46 60C44 47 48 37 62 23C76 10 118 -12 165 -12C238 -12 430 62 430 223C430 297 379 359 290 375V377Z" id="g50-52"></path></g><g transform="matrix(.013,0,0,-0.013,136.874,0)"><path d="M536 404C536 423 520 448 491 448C445 448 398 404 308 283L286 338C255 416 242 448 217 448C182 448 138 402 92 341L111 321C149 368 169 378 178 378C188 378 198 363 214 320L254 212C185 117 138 65 107 65C98 65 85 69 82 75C79 82 73 86 65 86C44 86 23 60 23 39C23 7 44 -12 71 -12C119 -12 168 33 265 177L306 61C321 17 347 -12 373 -12C413 -12 465 33 507 96L491 119C459 84 432 60 413 60C395 60 378 92 358 148L321 250C341 279 369 310 389 332C417 363 439 382 456 382C466 382 475 376 481 368C486 361 492 358 496 358C513 358 536 381 536 404Z" id="g113-121"></path></g><g transform="matrix(.0091,0,0,-0.0091,144.076,3.132)"><path d="M250 606C250 634 233 656 203 656C168 656 146 618 146 593C146 564 169 545 192 545C227 545 250 573 250 606ZM227 95L212 119C187 98 152 71 135 71C129 71 128 78 134 102L207 373C219 418 217 451 194 451C165 451 92 411 30 351L44 326C77 353 106 371 114 371C124 371 121 357 117 341L55 97C32 5 46 -12 70 -12C108 -12 191 51 227 95Z" id="g50-106"></path></g><g transform="matrix(.0065,0,0,-0.0065,146.579,5.233)"><path d="M444 576C444 642 407 670 363 670C327 670 293 660 255 630C198 585 161 518 118 341L103 280C79 258 54 238 25 220L34 188C54 199 77 216 95 230L83 169C70 101 74 55 94 29C115 2 144 -12 179 -12C250 -12 321 34 374 103L355 130C325 100 270 58 221 58C177 58 149 92 170 195L187 280C295 352 444 457 444 576ZM381 574C381 495 267 390 200 337L220 420C259 571 283 629 331 629C361 629 381 607 381 574Z" id="g176-127"></path></g><g transform="matrix(.0091,0,0,-0.0091,150.137,3.132)"><path d="M98 134C72 134 46 117 46 90C46 73 55 65 60 64C95 55 124 32 124 -4C124 -42 95 -68 44 -89L57 -123C122 -104 194 -60 194 22C194 94 136 134 98 134Z" id="g50-45"></path></g><g transform="matrix(.0091,0,0,-0.0091,152.293,3.132)"><path d="M462 177V227H365V632H320C217 496 116 350 21 208V177H284V109C284 43 280 38 190 31V0H451V31C369 38 365 43 365 108V177H462ZM284 227H88C155 336 218 430 282 519H284V227Z" id="g50-53"></path></g><g transform="matrix(.013,0,0,-0.013,157.257,0)"><path d="M556 393C556 426 537 448 514 448C496 448 478 435 471 420C468 414 462 401 466 394C473 382 480 368 480 346C480 268 392 143 338 67H336C329 163 319 253 309 330S286 448 254 448C215 448 160 383 127 337L143 311C167 344 200 373 208 373S222 365 229 320C246 214 264 66 268 -20C219 -83 131 -171 17 -239L25 -261L137 -235C248 -110 273 -79 335 8C384 77 481 215 520 287C544 332 556 363 556 393Z" id="g113-122"></path></g><g transform="matrix(.0091,0,0,-0.0091,164.199,3.132)"><path d="M250 606C250 634 233 656 203 656C168 656 146 618 146 593C146 564 169 545 192 545C227 545 250 573 250 606ZM227 95L212 119C187 98 152 71 135 71C129 71 128 78 134 102L207 373C219 418 217 451 194 451C165 451 92 411 30 351L44 326C77 353 106 371 114 371C124 371 121 357 117 341L55 97C32 5 46 -12 70 -12C108 -12 191 51 227 95Z" id="g50-106"></path></g><g transform="matrix(.0065,0,0,-0.0065,166.702,5.233)"><path d="M444 576C444 642 407 670 363 670C327 670 293 660 255 630C198 585 161 518 118 341L103 280C79 258 54 238 25 220L34 188C54 199 77 216 95 230L83 169C70 101 74 55 94 29C115 2 144 -12 179 -12C250 -12 321 34 374 103L355 130C325 100 270 58 221 58C177 58 149 92 170 195L187 280C295 352 444 457 444 576ZM381 574C381 495 267 390 200 337L220 420C259 571 283 629 331 629C361 629 381 607 381 574Z" id="g176-127"></path></g><g transform="matrix(.0091,0,0,-0.0091,170.26,3.132)"><path d="M98 134C72 134 46 117 46 90C46 73 55 65 60 64C95 55 124 32 124 -4C124 -42 95 -68 44 -89L57 -123C122 -104 194 -60 194 22C194 94 136 134 98 134Z" id="g50-45"></path></g><g transform="matrix(.0091,0,0,-0.0091,172.416,3.132)"><path d="M462 177V227H365V632H320C217 496 116 350 21 208V177H284V109C284 43 280 38 190 31V0H451V31C369 38 365 43 365 108V177H462ZM284 227H88C155 336 218 430 282 519H284V227Z" id="g50-53"></path></g></svg>.</span></div>

Security and Communication Networks

fig10

Figure 10

Figure 10: Efficient KDM-CCA Secure Public-Key Encryption via Auxiliary-Input Authenticated Encryption 