Abstract:The Snowden incident shows that powerful attackers can compromise users' machines to steal users' private information. Currently, many encryption schemes that have proven to be secure cannot detect vulnerabilities. These vulnerabilities may reveal users' secrets, e.g., a machine hides some backdoors without a user's awareness, and an attacker can steal the user's private information through these backdoors. In 2015, Mironov and Stephens-Davidowitz proposed a new framework for solving this problem: cryptographic reverse firewall (CRF). However, their protocols can't protect certificateless public key encryption (CL-PKE). In this paper, we design a CRF protocol for CL-PKE, which is a one-round CL-PKE with CRFs (CL-PKE-CRF) deployed on a receiver and a key generating centre (KGC). This protocol is proved to achieve indistinguishability against chosen plaintext attack (IND-CPA). Compared with existing protocol with CRFs and two CL-PKE schemes, our protocol has the least communication cost. Meanwhile, we use JPBC library to implement our one-round CL-PKE-CRF. The experimental results indicate that under high security levels, our protocol has a advantage in the percentage of the running time. Since our protocol can resist exfiltration attacks from internal attackers, it is efficient and practical. Finally, we apply the same method to design a secure and effective one-round certificateless public key signature with a CRF (CL-PKS-CRF). This means that our protocol is not only targeted at a single CL-PKE scheme, but also can inspire the design of other certificateless public key cryptography schemes with CRFs.

RSA-Based Certificateless Public Key Encryption

General And Efficient Certificateless Public Key Encryption Constructions

Provable Efficient Certificateless Public Key Encryption

Certificateless parallel key-insulated public key encryption

Pairing-Free Certificateless Key-Insulated Encryption with Provable Security

Certificateless Key-Insulated Signature Without Random Oracles

Constructing Efficient Certificateless Public Key Encryption with Pairing.

New Efficient Certificateless Blind Signature Scheme

Two-party Authenticated Key Agreement in Certificateless Public Key Cryptography

A New Certificateless Blind Signature Scheme

Cryptanalysis Of A Certificateless Signature Scheme Without Pairings

An Efficient and Provably-Secure Certificateless Signature Scheme Without Bilinear Pairings

Practical certificateless short signature scheme

An Efficient and Provably Secure Pairing-Free Certificateless Signature Scheme Based on Variant of RSA.

Public Key Encryption Without Random Oracle Made Truly Practical

Certificateless Public Key Encryption with Cryptographic Reverse Firewalls

Certificateless Key-Insulated Encryption: Cryptographic Primitive for Achieving Key-Escrow Free and Key-Exposure Resilience

Certificateless Two-Party Authenticated Key Agreement Protocol Based on Bilinear Pairings

Efficient and Provably Secure Certificateless Signature from Bilinear Pairings

A Modified Efficient Certificateless Signature Scheme without Bilinear Pairings

Certificateless Public Key Encryption From The Weil Pairing