On the Equivalence of Several Security Notions of Key Encapsulation Mechanism.
Waka Nagao, Yoshifumi Manabe, Tatsuaki Okamoto · 2006
KEM (Key Encapsulation Mechanism) was introduced by Shoup to formalize the asymmetric encryption specified for key distribution in ISO standards on public-key encryption. Shoup defined the "semantic security (IND) against adaptively chosen ciphertext attacks (CCA2)" as a desirable security notion of KEM. This paper introduces "non- malleability (NM)" of KEM, a stronger security notion than IND. We provide three definitions of NM, and show that these three definitions are equivalent.