Efficient key encapsulation to multiple partiesNigel Smart, Efficient key encapsulation to multiple parties. Security in Communication Networks (SCN 2004). ISBN 3-540-24301-1, pp. 208–219. January 2005. No electronic version available. External information
We present the notion of an mKEM, which is a Key Encapsulation Mechanism (KEM) which takes multiple public keys as input. This has applications where one wishes to encrypt a single large document to a set of multiple recipients, as when one sends an encrypted email to more than one person. We present a security definition and show that the naive approach to implementing an mKEM is secure under this definition. We then go on to present a more efficient construction of an mKEM, which is secure in the random oracle model.