- 标准模型下格上的密钥封装机制
http://www.doc88.com/p-2038406323993.html
涵盖密钥封装的提出背景、解决的问题，引言部分有发展介绍
- New Constructions of Identity-Based and Key-Dependent Message Secure Encryption Schemes （Dottling）
https://eprint.iacr.org/2017/978.pdf
LPN构造IBE和OTSE并通过OTSE构造KDM安全的公钥加密方案。但是只达到KDM-CPA安全，还没有KDM-CCA安全的构造方法。
已有的基于LPN的KDM方案：Dottling的low-noise，以及韩帅的constant noise
Simulation-based Selective Opening CCA Security for PKE from Key Encapsulation Mechanisms (Liu Shengli)
https://eprint.iacr.org/2015/010.pdf
通过KEM来构建SIM-SO-CCA安全的PKE
- Hybrid Key Encapsulation Mechanisms and Authenticated Key Exchange
https://eprint.iacr.org/2018/903.pdf
通过KEM来构建认证密钥交换
- Identification Schemes from Key Encapsulation Mechanisms
https://www.jstage.jst.go.jp/article/transfun/E95.A/7/E95.A_1136/_article
从KEM方案到Identification 方案
Randomness Re-use in Multi-recipient Encryption Schemeas (PKC)
https://www.researchgate.net/publication/221010704_Randomness_Re-use_in_Multi-recipient_Encryption_SchemeasMulti-recipient Public-Key Encryption with Shortened Ciphertext (PKC)
https://link.springer.com/chapter/10.1007/3-540-45664-3_4
=========
- 1.3 节，KEM相关用途
https://eprint.iacr.org/2013/765.pdf
