conference paper
On Hiding a Plaintext Length by Preencryption
2011
Applied Cryptography and Network Security. ACNS 2011
It is a well known fact that encryption schemes can not hide a plaintext length when it is unbounded. We thus admit that an approximation of it may leak and we focus on hiding its precise value. Some standards such as TLS or SSH offer to do it by applying some pad-then-encrypt techniques. In this study, we investigate the information leakage when these techniques are used. We define the notion of padding scheme and its associated security. We show that when a padding length is uniformly distributed, the scheme is nearly optimal. We also show that the insecurity degrades linearly with the padding length.
Type
conference paper
Author(s)
Tezcan, Cihangir
Date Issued
2011
Publisher
Published in
Applied Cryptography and Network Security. ACNS 2011
Series title/Series vol.
Lecture Notes in Computer Science; 6715
Start page
345
End page
358
Editorial or Peer reviewed
REVIEWED
Written at
EPFL
EPFL units
Event name | Event place | Event date |
Malaga, Spain | June 7-10, 2011 | |
Available on Infoscience
June 8, 2011
Use this identifier to reference this record