Standard Security Does Not Imply Security against Selective-Opening.

Mihir Bellare Rafael Dowsley Brent Waters Scott Yilek Standard Security Does Not Imply Security against Selective-Opening. 645-662 2012 EUROCRYPT http://dx.doi.org/10.1007/978-3-642-29011-4_38 conf/eurocrypt/2012 db/conf/eurocrypt/eurocrypt2012.html#BellareDWY12