Abstract. We propose a semantically-secure public-key encryption scheme whose security is polynomialtime equivalent to the hardness of solving random instances of the subset sum problem. The subset sum assumption required for the security of our scheme is weaker than that of existing subset-sum based encryption schemes, namely the lattice-based schemes of Ajtai and Dwork (STOC '97), Regev (STOC '03, STOC '05), and Peikert (STOC '09). Additionally, our proof of security is simple and direct. We also present a natural variant of our scheme that is secure against key-leakage attacks, as well as an oblivious transfer protocol that is secure against semi-honest adversaries.
Besides constructing PKE schemes, REF additionally presents an oblivious transfer protocol with security against malicious senders and semi-honest receivers.
Public-key cryptographic primitives provably as secure as subset sum
In Proceedings of the 7th Theory of Cryptography Conference
Computer Science