https://link.springer.com/chapter/10.1007/3-540-45353-9_13 CT-RSA 2001, by Okamoto and Pointcheval Transforms a OW-PCA PKE into an IND-CCA PKE. Sound familiar?? –> [[SoK - Public Key Encryption with Openings]] KEM variant with explicit react: T_ch, proposed at EC'22 https://link.springer.com/chapter/10.1007/978-3-031-07082-2_22 Shown IND-qCCA secure at PKC 2023 (together with the FO), https://link.springer.com/chapter/10.1007/978-3-031-31368-4_2