Editing Chosen-ciphertext attack (section)

{{Short description|Attack model for cryptanalysis}}
{{more footnotes needed|date=January 2011}}
A '''chosen-ciphertext attack''' ('''CCA''') is an [[attack model]] for [[cryptanalysis]] where the cryptanalyst can gather information by obtaining the decryptions of chosen ciphertexts. From these pieces of information the adversary can attempt to recover the secret key used for decryption.

For formal definitions of security against chosen-ciphertext attacks, see for example:  [[Michael Luby]]<ref name="luby">{{cite book|last1=Luby|first1=Michael|title=Pseudorandomness and Cryptographic Applications|date=1996|publisher=Princeton University Press}}</ref> and [[Mihir Bellare]] et al.<ref name=BDJR>{{cite book|last1=Bellare|first1=M.|last2=Desai|first2=A.|last3=Jokipii|first3=E.|last4=Rogaway|first4=P.|title=Proceedings 38th Annual Symposium on Foundations of Computer Science |chapter=A concrete security treatment of symmetric encryption |date=1997|pages=394–403|doi=10.1109/SFCS.1997.646128|isbn=0-8186-8197-7|s2cid=42604387}}</ref>