Mihir Bellare Phillip Rogaway Optimal Asymmetric Encryption. 92-111 http://link.springer.de/link/service/series/0558/bibs/0950/09500092.htm 1994 EUROCRYPT db/conf/eurocrypt/eurocrypt94.html#BellareR94