Two batch-decryption schemes, RSA under strong RSA and IBE under CDH, because apparently public decryption needed a fresh paper.
trending2
01 02 Generic Bounds for Multi-Instance Problems: The Strange Case of Inverse Diffie-Hellman eprint.iacr.orgMulti-instance CDH/SDH stay boringly independent, but IDH/LKDH get weirdly easier; paper proves tight generic bounds via hyperplanes.