Efficient KDM-CCA Secure Public-Key Encryption via Auxiliary-Input Authenticated Encryption

<div>Construction of<span class="sans-serif"> PKE</span> from <span class="nowrap"><svg height="12.0262pt" id="M995" style="vertical-align:-3.18153pt" version="1.1" viewbox="-0.0498162 -8.84467 49.4705 12.0262" width="49.4705pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.013,0,0,-0.013,8.69,0)"><path d="M356 74H245V588H356L347 662H59L45 588H156V74H45L59 0H347L356 74Z" id="g202-20"></path></g><g transform="matrix(.013,0,0,-0.013,13.923,0)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.013,0,0,-0.013,22.614,0)"><path d="M540 74H161V311H466V386H161V588H513V662H74V0H523L540 74Z" id="g202-16"></path></g><g transform="matrix(.0091,0,0,-0.0091,30.221,3.132)"><path d="M74 662V0H289C536 0 656 156 656 327C656 539 528 662 240 662H74ZM161 74V588H221C332 588 407 577 471 532C542 484 567 420 567 328C567 229 533 155 454 114C387 79 326 74 210 74H161Z" id="g202-15"></path></g><g transform="matrix(.0091,0,0,-0.0091,36.542,3.132)"><path d="M74 662V0H289C536 0 656 156 656 327C656 539 528 662 240 662H74ZM161 74V588H221C332 588 407 577 471 532C542 484 567 420 567 328C567 229 533 155 454 114C387 79 326 74 210 74H161Z" id="g202-15"></path></g><g transform="matrix(.0091,0,0,-0.0091,42.862,3.132)"><path d="M584 0V662H497V375H161V662H74V0H161V301H497V0H584Z" id="g202-19"></path></g></svg>.</span> The shadowed parts highlight algorithms of<span class="sans-serif"> KEM</span> and <span class="nowrap"><svg height="9.25986pt" id="M996" style="vertical-align:-0.2455397pt" version="1.1" viewbox="-0.0498162 -9.01432 9.88621 9.25986" width="9.88621pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M421 658C372 683 338 687 289 687C174 687 100 624 100 549C100 458 196 404 336 401C341 401 342 386 347 381V379C196 347 110 258 110 154C110 43 211 -15 326 -15C463 -15 584 71 584 161C584 228 542 276 450 276C352 276 275 206 248 98L269 92C293 177 364 234 433 234C485 234 520 207 520 160C520 131 509 102 485 75C454 40 404 15 336 15C244 15 192 73 192 134C192 220 267 311 387 343C403 334 419 329 440 329C464 329 482 338 482 357C482 377 454 385 407 388C404 392 404 393 403 400C588 413 734 506 734 585C734 633 698 658 634 658C511 658 343 568 332 432C229 432 141 472 141 546C141 610 204 657 301 657C356 657 372 656 411 640L421 658ZM693 588C693 524 566 441 403 430C416 521 546 621 641 621C670 621 693 608 693 588Z" id="g198-6"></path></g></svg>.</span> Here <span class="nowrap"><svg height="10.2124pt" id="M997" style="vertical-align:-3.42943pt" version="1.1" viewbox="-0.0498162 -6.78297 7.83752 10.2124" width="7.83752pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M570 304C570 398 525 448 414 448C385 448 343 445 312 434L329 511L321 518C297 504 262 482 244 460L233 411C195 397 159 381 128 358L135 332C160 347 189 360 224 373L111 -147C97 -210 84 -218 17 -231L13 -257L254 -247L259 -218L233 -216C183 -212 177 -202 189 -142L218 -1C238 -10 266 -12 283 -12C351 3 429 48 483 105C543 168 570 242 570 304ZM482 289C482 161 380 33 304 33C278 33 248 51 233 69L303 396C326 400 352 403 369 403C428 403 482 380 482 289Z" id="g113-113"></path></g></svg>,</span> <svg height="9.39034pt" id="M998" style="vertical-align:-3.42943pt" version="1.1" viewbox="-0.0498162 -5.96091 6.50656 9.39034" width="6.50656pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M474 429L457 433C435 440 389 448 367 448C348 448 323 446 309 443C266 434 195 406 148 366C78 307 23 210 23 101C23 35 55 -12 92 -12C118 -12 146 1 196 35C247 70 311 130 346 173H348L281 -148C268 -211 256 -221 208 -229L191 -232L187 -257L433 -245L437 -219L411 -216C357 -210 350 -205 362 -140L427 207C447 315 461 381 474 429ZM387 387C379 337 363 262 355 236C318 180 201 57 142 57C126 57 112 81 112 128C112 205 150 321 220 376C244 395 280 403 312 403C345 403 370 396 387 387Z" id="g113-114"></path></g></svg> in <svg height="9.45686pt" id="M999" style="vertical-align:-3.352429pt" version="1.1" viewbox="-0.0498162 -6.10443 43.5568 9.45686" width="43.5568pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M142 459L134 464L67 440V-211L76 -216L146 -192V26C181 1 218 -10 253 -10C373 -10 470 102 470 244C470 331 428 405 372 440C345 457 312 463 281 463C234 463 181 445 144 409L142 459ZM146 295C169 355 214 392 261 392C345 392 391 318 391 230C391 136 338 61 249 61C210 61 173 80 146 123V295Z" id="g202-53"></path></g><g transform="matrix(.013,0,0,-0.013,6.498,0)"><path d="M391 0C384 28 381 53 381 76V326C381 414 316 463 219 463C141 463 64 430 45 333L94 302H109C125 350 154 392 217 392C268 392 302 366 302 327V294C112 256 35 195 35 101C35 25 83 -10 152 -10C203 -10 258 5 301 44L306 0H391ZM302 132C257 81 211 61 172 61C132 61 114 80 114 112C114 143 128 160 164 179C193 195 242 211 302 222V132Z" id="g202-38"></path></g><g transform="matrix(.013,0,0,-0.013,12.344,0)"><path d="M328 377V447C309 462 287 463 271 463C231 463 179 446 144 395L142 459L133 464L63 440V0H142V234C165 333 212 392 269 392C276 392 301 388 308 377H328Z" id="g202-55"></path></g><g transform="matrix(.013,0,0,-0.013,16.728,0)"><path d="M330 321V410C299 442 258 463 194 463C105 463 49 405 49 338S84 234 185 189C248 161 271 145 271 118C271 79 235 61 195 61C140 61 94 84 65 148H50V45C91 9 125 -10 189 -10C228 -10 262 -3 289 14C328 38 350 77 350 118C350 190 321 220 212 265C164 285 128 305 128 342C128 363 145 393 192 393C236 393 275 384 315 321H330Z" id="g202-56"></path></g><g transform="matrix(.0091,0,0,-0.0091,21.804,3.303)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.0091,0,0,-0.0091,27.888,3.303)"><path d="M356 74H245V588H356L347 662H59L45 588H156V74H45L59 0H347L356 74Z" id="g202-20"></path></g><g transform="matrix(.0091,0,0,-0.0091,31.55,3.303)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.0091,0,0,-0.0091,37.634,3.303)"><path d="M540 74H161V311H466V386H161V588H513V662H74V0H523L540 74Z" id="g202-16"></path></g></svg> are not provided in <span class="nowrap"><svg height="15.2701pt" id="M1000" style="vertical-align:-3.834pt" version="1.1" viewbox="-0.0498162 -11.4361 43.5568 15.2701" width="43.5568pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M142 459L134 464L67 440V-211L76 -216L146 -192V26C181 1 218 -10 253 -10C373 -10 470 102 470 244C470 331 428 405 372 440C345 457 312 463 281 463C234 463 181 445 144 409L142 459ZM146 295C169 355 214 392 261 392C345 392 391 318 391 230C391 136 338 61 249 61C210 61 173 80 146 123V295Z" id="g202-53"></path></g><g transform="matrix(.013,0,0,-0.013,6.498,0)"><path d="M391 0C384 28 381 53 381 76V326C381 414 316 463 219 463C141 463 64 430 45 333L94 302H109C125 350 154 392 217 392C268 392 302 366 302 327V294C112 256 35 195 35 101C35 25 83 -10 152 -10C203 -10 258 5 301 44L306 0H391ZM302 132C257 81 211 61 172 61C132 61 114 80 114 112C114 143 128 160 164 179C193 195 242 211 302 222V132Z" id="g202-38"></path></g><g transform="matrix(.013,0,0,-0.013,12.344,0)"><path d="M328 377V447C309 462 287 463 271 463C231 463 179 446 144 395L142 459L133 464L63 440V0H142V234C165 333 212 392 269 392C276 392 301 388 308 377H328Z" id="g202-55"></path></g><g transform="matrix(.013,0,0,-0.013,16.728,0)"><path d="M330 321V410C299 442 258 463 194 463C105 463 49 405 49 338S84 234 185 189C248 161 271 145 271 118C271 79 235 61 195 61C140 61 94 84 65 148H50V45C91 9 125 -10 189 -10C228 -10 262 -3 289 14C328 38 350 77 350 118C350 190 321 220 212 265C164 285 128 305 128 342C128 363 145 393 192 393C236 393 275 384 315 321H330Z" id="g202-56"></path></g><g transform="matrix(.0091,0,0,-0.0091,21.804,-5.741)"><path d="M310 541L304 571C290 586 211 619 185 610L80 76L131 52L310 541Z" id="g50-31"></path></g><g transform="matrix(.0091,0,0,-0.0091,21.804,3.784)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.0091,0,0,-0.0091,27.888,3.784)"><path d="M356 74H245V588H356L347 662H59L45 588H156V74H45L59 0H347L356 74Z" id="g202-20"></path></g><g transform="matrix(.0091,0,0,-0.0091,31.55,3.784)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.0091,0,0,-0.0091,37.634,3.784)"><path d="M540 74H161V311H466V386H161V588H513V662H74V0H523L540 74Z" id="g202-16"></path></g></svg>,</span> since they are not used in <svg height="11.713pt" id="M1001" style="vertical-align:-2.86833pt" version="1.1" viewbox="-0.0498162 -8.84467 74.2035 11.713" width="74.2035pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.013,0,0,-0.013,8.69,0)"><path d="M356 74H245V588H356L347 662H59L45 588H156V74H45L59 0H347L356 74Z" id="g202-20"></path></g><g transform="matrix(.013,0,0,-0.013,13.923,0)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.013,0,0,-0.013,22.614,0)"><path d="M540 74H161V311H466V386H161V588H513V662H74V0H523L540 74Z" id="g202-16"></path></g><g transform="matrix(.013,0,0,-0.013,30.221,0)"><path d="M113 -12C146 -12 170 11 170 46C170 78 146 103 114 103S58 78 58 46C58 11 82 -12 113 -12Z" id="g113-47"></path></g><g transform="matrix(.013,0,0,-0.013,33.185,0)"><path d="M540 74H161V311H466V386H161V588H513V662H74V0H523L540 74Z" id="g202-16"></path></g><g transform="matrix(.013,0,0,-0.013,40.792,0)"><path d="M424 0V321C424 362 415 394 397 418C374 441 330 463 290 463C235 463 191 453 139 402L137 459L128 464L63 440V0H142V302C163 361 230 392 263 392C314 392 345 369 345 304V0H424Z" id="g202-51"></path></g><g transform="matrix(.013,0,0,-0.013,47.147,0)"><path d="M367 166C332 90 283 61 238 61C164 61 102 121 102 222C102 334 166 392 238 392C280 392 327 376 351 317H367L411 371C378 435 313 463 242 463C118 463 23 363 23 216C23 132 58 69 107 30C143 2 183 -10 232 -10C272 -10 311 -1 347 24C380 47 409 81 432 132L367 166Z" id="g202-40"></path></g><g transform="matrix(.013,0,0,-0.013,53.097,0)"><path d="M328 377V447C309 462 287 463 271 463C231 463 179 446 144 395L142 459L133 464L63 440V0H142V234C165 333 212 392 269 392C276 392 301 388 308 377H328Z" id="g202-55"></path></g><g transform="matrix(.013,0,0,-0.013,57.482,0)"><path d="M453 453H368L259 130L120 453H34L222 27C219 16 214 5 211 -6C187 -81 149 -144 105 -144C90 -144 72 -140 45 -120H28V-192C48 -211 76 -216 103 -216C192 -216 236 -155 275 -44L453 453Z" id="g202-62"></path></g><g transform="matrix(.013,0,0,-0.013,63.797,0)"><path d="M142 459L134 464L67 440V-211L76 -216L146 -192V26C181 1 218 -10 253 -10C373 -10 470 102 470 244C470 331 428 405 372 440C345 457 312 463 281 463C234 463 181 445 144 409L142 459ZM146 295C169 355 214 392 261 392C345 392 391 318 391 230C391 136 338 61 249 61C210 61 173 80 146 123V295Z" id="g202-53"></path></g><g transform="matrix(.013,0,0,-0.013,70.296,0)"><path d="M287 87H275C251 64 231 61 211 61C180 61 160 75 160 137V382H264V453H160V580H142L81 517V453H46L1 399V382H81V104C81 35 119 -10 188 -10C221 -10 251 -7 276 12L287 87Z" id="g202-57"></path></g></svg> and <svg height="11.713pt" id="M1002" style="vertical-align:-2.86833pt" version="1.1" viewbox="-0.0498162 -8.84467 75.0648 11.713" width="75.0648pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.013,0,0,-0.013,8.69,0)"><path d="M356 74H245V588H356L347 662H59L45 588H156V74H45L59 0H347L356 74Z" id="g202-20"></path></g><g transform="matrix(.013,0,0,-0.013,13.923,0)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.013,0,0,-0.013,22.614,0)"><path d="M540 74H161V311H466V386H161V588H513V662H74V0H523L540 74Z" id="g202-16"></path></g><g transform="matrix(.013,0,0,-0.013,30.221,0)"><path d="M113 -12C146 -12 170 11 170 46C170 78 146 103 114 103S58 78 58 46C58 11 82 -12 113 -12Z" id="g113-47"></path></g><g transform="matrix(.013,0,0,-0.013,33.185,0)"><path d="M74 662V0H289C536 0 656 156 656 327C656 539 528 662 240 662H74ZM161 74V588H221C332 588 407 577 471 532C542 484 567 420 567 328C567 229 533 155 454 114C387 79 326 74 210 74H161Z" id="g202-15"></path></g><g transform="matrix(.013,0,0,-0.013,42.215,0)"><path d="M362 167C332 96 291 61 238 61C164 61 102 117 102 222H411V277C411 386 345 463 238 463C182 463 134 446 95 409C52 369 23 306 23 226C23 74 113 -10 230 -10C327 -10 380 34 428 132L362 167ZM115 293C128 364 183 392 230 392C274 392 327 378 330 293H115Z" id="g202-42"></path></g><g transform="matrix(.013,0,0,-0.013,48.008,0)"><path d="M367 166C332 90 283 61 238 61C164 61 102 121 102 222C102 334 166 392 238 392C280 392 327 376 351 317H367L411 371C378 435 313 463 242 463C118 463 23 363 23 216C23 132 58 69 107 30C143 2 183 -10 232 -10C272 -10 311 -1 347 24C380 47 409 81 432 132L367 166Z" id="g202-40"></path></g><g transform="matrix(.013,0,0,-0.013,53.959,0)"><path d="M328 377V447C309 462 287 463 271 463C231 463 179 446 144 395L142 459L133 464L63 440V0H142V234C165 333 212 392 269 392C276 392 301 388 308 377H328Z" id="g202-55"></path></g><g transform="matrix(.013,0,0,-0.013,58.343,0)"><path d="M453 453H368L259 130L120 453H34L222 27C219 16 214 5 211 -6C187 -81 149 -144 105 -144C90 -144 72 -140 45 -120H28V-192C48 -211 76 -216 103 -216C192 -216 236 -155 275 -44L453 453Z" id="g202-62"></path></g><g transform="matrix(.013,0,0,-0.013,64.658,0)"><path d="M142 459L134 464L67 440V-211L76 -216L146 -192V26C181 1 218 -10 253 -10C373 -10 470 102 470 244C470 331 428 405 372 440C345 457 312 463 281 463C234 463 181 445 144 409L142 459ZM146 295C169 355 214 392 261 392C345 392 391 318 391 230C391 136 338 61 249 61C210 61 173 80 146 123V295Z" id="g202-53"></path></g><g transform="matrix(.013,0,0,-0.013,71.157,0)"><path d="M287 87H275C251 64 231 61 211 61C180 61 160 75 160 137V382H264V453H160V580H142L81 517V453H46L1 399V382H81V104C81 35 119 -10 188 -10C221 -10 251 -7 276 12L287 87Z" id="g202-57"></path></g></svg> of <span class="nowrap"><svg height="12.0262pt" id="M1003" style="vertical-align:-3.18153pt" version="1.1" viewbox="-0.0498162 -8.84467 49.4705 12.0262" width="49.4705pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.013,0,0,-0.013,8.69,0)"><path d="M356 74H245V588H356L347 662H59L45 588H156V74H45L59 0H347L356 74Z" id="g202-20"></path></g><g transform="matrix(.013,0,0,-0.013,13.923,0)"><path d="M635 0L346 674H320L31 0H127L208 200H457L539 0H635ZM427 274H239L333 503L427 274Z" id="g202-12"></path></g><g transform="matrix(.013,0,0,-0.013,22.614,0)"><path d="M540 74H161V311H466V386H161V588H513V662H74V0H523L540 74Z" id="g202-16"></path></g><g transform="matrix(.0091,0,0,-0.0091,30.221,3.132)"><path d="M74 662V0H289C536 0 656 156 656 327C656 539 528 662 240 662H74ZM161 74V588H221C332 588 407 577 471 532C542 484 567 420 567 328C567 229 533 155 454 114C387 79 326 74 210 74H161Z" id="g202-15"></path></g><g transform="matrix(.0091,0,0,-0.0091,36.542,3.132)"><path d="M74 662V0H289C536 0 656 156 656 327C656 539 528 662 240 662H74ZM161 74V588H221C332 588 407 577 471 532C542 484 567 420 567 328C567 229 533 155 454 114C387 79 326 74 210 74H161Z" id="g202-15"></path></g><g transform="matrix(.0091,0,0,-0.0091,42.862,3.132)"><path d="M584 0V662H497V375H161V662H74V0H161V301H497V0H584Z" id="g202-19"></path></g></svg>.</span></div>

Security and Communication Networks

fig8

Figure 8

Figure 8: Efficient KDM-CCA Secure Public-Key Encryption via Auxiliary-Input Authenticated Encryption 