Lecture 5 - multi message encryption
amit (guest) 26 Jan 2020 12:23
In lecture 4 it is said:
"Note on Randomized Encryption. Note that the constructed encryption scheme is randomized. In fact, any stateless encryption scheme for more than a single message must be randomized (think why)."
The answer is that if it is not randomized, an attacker can distinguish between encryption of (m_0,m_0,m_0) to encryption of (m_0,m_0,m_1), since in the first all the 3 will always be the same and in the second not?
If not, what is the answer?
Thanks!
