Nonce-aware encryption
Ming-Luen Wu · WSEAS Transactions on Information Science and Applications archive · 2009
As an alternative perspective on designing IND-CCA2 encryption, we introduce a new security notion, nonce-awareness, for encryption. An encryption scheme is nonce-aware if it is computationally infeasible to produce a valid ciphertext without knowing the associated nonce. We also show that two remarkable IND-CCA2 encryption schemes are nonce-aware.