OWF + iO ⇒ Deniable encryption

Free reduction · standard model · SW14

Statement

iO for circuits and one-way functions yield CPA-secure, publicly deniable — in particular sender-deniable — encryption: for any ciphertext and any message, the sender can produce randomness explaining the ciphertext as an encryption of that message, indistinguishably from the honest randomness — SW14.