First of all, thank you for creating this presentation! I had a question: In step#6, for encryption, when choosing sets of random elements of the public key K (in this example, for (bits==0), K[1] and K[3], and for (bits==1), K[1] and K[2]), are the choices of sets known *publicly* also? In other words, is that selection known to everybody? It just seems confusing to me because it seems like if an adversary knew which sets were chosen, he could deduce what the original plaintext was from the resulting tuples, so I feel like I'm missing an important concept here. Thanks again!
Hello! Great question and I should have clarified this in the video. The choices are NOT public. You are completely right and the encryption scheme would fail if it was.
First of all, thank you for creating this presentation!
I had a question:
In step#6, for encryption, when choosing sets of random elements of the public key K (in this example, for (bits==0), K[1] and K[3], and for (bits==1), K[1] and K[2]), are the choices of sets known *publicly* also? In other words, is that selection known to everybody? It just seems confusing to me because it seems like if an adversary knew which sets were chosen, he could deduce what the original plaintext was from the resulting tuples, so I feel like I'm missing an important concept here.
Thanks again!
Hello!
Great question and I should have clarified this in the video.
The choices are NOT public. You are completely right and the encryption scheme would fail if it was.