Editing Semantic security (section)

==History==
The notion of semantic security was first put forward by [[Shafi Goldwasser|Goldwasser]] and [[Silvio Micali|Micali]] in 1982.<ref name="goldwasser-micali 1982" /><ref>{{Cite journal |last1=Goldwasser |first1=Shafi |last2=Micali |first2=Silvio |date=1984-04-01 |title=Probabilistic encryption |url=https://dx.doi.org/10.1016/0022-0000%2884%2990070-9 |journal=Journal of Computer and System Sciences |volume=28 |issue=2 |pages=270–299 |doi=10.1016/0022-0000(84)90070-9 |issn=0022-0000}}</ref>  However, the definition they initially proposed offered no straightforward means to prove the security of practical cryptosystems.  Goldwasser/Micali subsequently demonstrated that semantic security is equivalent to another definition of security called [[ciphertext indistinguishability]] under chosen-plaintext attack.<ref name="goldwasser-micali 1984">[[Shafi Goldwasser|S. Goldwasser]] and [[Silvio Micali|S. Micali]], [https://dx.doi.org/10.1016/0022-0000(84)90070-9 Probabilistic encryption]. Journal of Computer and System Sciences, 28:270-299, 1984.</ref>  This latter definition is more common than the original definition of semantic security because it better facilitates proving the security of practical cryptosystems.