Number Theoretic And Algebraic CryptographyNumber Theoretic • May 14th, 2015
Note that the challenger’s choice of b differ between Hj and Hj−1. Meaning that if we can distinguish between two consecutive hybrids, we can break the CPA security. Because:
