next up previous
Next: Analysis Using the Analyzer Up: Definitions Previous: Known Pairs

Chosen Pair

Definition 6

A pair, $\langle p, c \rangle$, is a chosen plaintext pair with respect to a principal, I , and key, k , if and only if $I \mbox{\it{ choose }} \allowbreak p~ \wedge$ $I \mbox{\it{ knows }} \allowbreak \langle p, c \rangle~ \wedge$ $\langle p, c, k \rangle.$  

A chosen plaintext pair is a pair whose plaintext can be chosen by a certain principal. Chosen-plaintext pairs can lead to vulnerabilities that enable the adversary to forge messages using the key, read messages, or learn the key. Messages can be forged by exercising the system to create new messages. The key can be learned by precomputing a dictionary of a chosen plaintext under the key space. Note, however, it must be possible for the adversary to obtain the corresponding ciphertext.

Definition 7

A pair, $\langle p, c \rangle$, is a chosen ciphertext pair with respect to a principal, I , and key, k , if and only if $I \mbox{\it{ choose }} \allowbreak c~ \wedge$ $I \mbox{\it{ knows }} \allowbreak \langle p, c \rangle~ \wedge$ $\langle p, c, k \rangle$.  

A chosen ciphertext pair is a pair whose ciphertext can be chosen by a certain principal.