1

enter image description here

enter image description here

Here is the game:

enter image description here

How can I make an $\mathcal{O}(k^2)$-time adversary making only one query to its Fn oracle and achieving advantage $= 1 - 1/(p-1)$

Here is my idea so far: query $2^{-1}$, which when it goes through the Encryption algorithm, will return 1. So,

Adversary A:
C <- Fn(2^{-1})
if C == 1 return 1
else return 0

When we query 2^{-1}: \begin{align} Y_1 &= (2^{-1})^e &\bmod p \\ Y_2 &= 2^e &\bmod p \\ Y &= (2^{-1}\cdot 2)^e &\bmod p \\ &= 1^e &\bmod p \\ &= 1 \text{ (for all e)} \end{align}

Is this allowed? Is it okay to query $2^{-1}$. I am assuming here that $2^{-1}$ is in $Z_p$ as long as $2$ is relatively prime.

Is this Adversary correct?

kelalaka
  • 49,797
  • 12
  • 123
  • 211

0 Answers0