I am writing a paper and I got comments from the reviewer that I don’t really understand.

Is there any difference between a CPA (Chosen Plaintext Attack) and IND-CPA (Indistinguishability under Chosen Plaintext Attack) when evaluating the security of an encryption scheme?

  • 2
    $\begingroup$ IND-CPA means you "survive" a CPA. CPA by itself is no security notion but an adversary model. "CPA-secure" usually refers to IND-CPA. $\endgroup$ – SEJPM Oct 2 '15 at 16:47

IND-CPA is equivalent to semantic security under CPA.


Your Answer

