On the Security of Padding-Based Encryption Schemes - or - Why We Cannot Prove OAEP Secure in the Standard Model.

Eike Kiltz, Krzysztof Pietrzak

Browse the full EuroCrypt paper archive.