Skip to content
uencoder

Chosen-Plaintext Attack

In the chosen-plaintext attack model the adversary can submit arbitrary plaintexts and obtain the corresponding ciphertexts; it is the standard security requirement for public-key encryption (IND-CPA).

Purpose

It sets the security bar for public-key encryption and symmetric modes: even an attacker who can encrypt arbitrary plaintexts cannot distinguish the ciphertexts of two challenge plaintexts.

Mechanism

The adversary has an encryption oracle E_K(·) and may query any P to get C. IND-CPA requires the attacker to be unable to distinguish E_K(P0) from E_K(P1). ECB fails this (repeated blocks leak).

Use cases

  • Public-key encryption security standard
  • Symmetric mode security evaluation
  • IND-CPA definitions

Related tools

AES Encryptor
Encrypt text or binary data with AES (CBC/GCM/ECB) using Web Crypto API. Free, private, and 100% client-side.
TOOL
RSA Tool
RSA key generation, encryption, decryption, signing, and verification using Web Crypto API. Free, private, and 100% client-side.
TOOL

References