ded abstract of this paper appears in Advances in Cryptology { Crypto 98 Proceedings, Lecture Notes in Computer Science Vol. 1462, H. Krawczyk ed., Springer-Verlag, 1998. This is the full paper. Relations Among Notions of Security for Public-Key Encryption Schemes M. Bellare A. Desai D. Pointchevaly P. Rogawayz February 1999 We compare the relative strengths of popular notions of security for public-key encryption schemes. We consider the goals of privacy and non-malleability, each under chosen-plaintext attack and two kinds of chosen-ciphertext attack. For each of the resulting pairs of de nitions we prove either an implication (every scheme meeting one notion must meet the other) or a separation (there is a scheme meeting one notion but not the other, assuming the rst notion can be met at all). We similarly treat plaintext awareness, a notion of security in the randomoracle model. An additional contribution of this paper is a new de nition of non-malleability which we believe is sim...