Plaintext aware encryption in the standard model under the linear Diffie-Hellman knowledge assumption