Abstract:Proxy re-encryption (PRE), as a promising cryptographic primitive for secure data sharing in clouds, has been widely studied for decades. PRE allows the proxies to use the re-encryption keys to convert ciphertexts computed under the delegator's public key into ones that can be decrypted using the delegatees' secret keys, without knowing anything about the underlying plaintext. This delegable property of decryption rights enables flexible cloud data sharing, but it raises an important issue: if some proxies reveal their re-encryption keys, or collude with some delegatees to create a pirate decoder, then anyone who gains access to the pirate decoder can decrypt all ciphertexts computed under the delegator's public key without the delegator's permission. This paper opens up a potentially new avenue of research to address the above (re-encryption) key abuse problem by proposing the first public trace-and-revoke PRE system, where the malicious delegatees and proxies involved in the generation of a pirate decoder can be identified by anyone who gains access to the pirate decoder, and their decryption capabilities can subsequently be revoked by the content distributor. Our construction is multi-hop, supports user revocation and public (black-box) traceability, and achieves significant efficiency advantages over previous constructions. Technically, our construction is a generic transformation from inner-product functional PRE (IPFPRE) that we introduce to trace-and-revoke PRE. In addition, we instantiate our generic construction of trace-and-revoke PRE from the Learning with Errors (LWE) assumption, which was widely believed to be quantum-resistant. This is achieved by proposing the first LWE-based IPFPRE scheme, which may be of independent interest. Finally, we conduct a comprehensive performance evaluation of our LWE-based trace-and-revoke PRE scheme, and the experimental results show that the proposed LWE-based trace-and-revoke PRE scheme is practical and outperforms current state-of-the-art traceable PRE schemes.

Trace and revoke systems with short ciphertexts

A traceable and revocable broadcast encryption scheme for preventing malicious encryptors in medical IoT

A Note on the Security of KHL Scheme

Bounds on Traceability Schemes

A Revocable Certificateless Encryption Scheme for Multi‐User

You Can Access but You Cannot Leak: Defending Against Illegal Content Redistribution in Encrypted Cloud Media Center

Fully Privacy-Preserving ID-Based Broadcast Encryption with Authorization

Lower Bounds and New Constructions on Secure Group Communication Schemes.

Broadcast Encryption-Based P2P DRM without Central License Server

Untraceable VoIP Communication based on DC-nets

How to Subvert Backdoored Encryption: Security Against Adversaries that Decrypt All Ciphertexts

Quantum-secure content key delivery mechanism for DRM system

Cryptanalyzing a class of image encryption schemes based on Chinese Remainder Theorem

Differential Degradation Vulnerabilities in Censorship Circumvention Systems

Public Trace-and-Revoke Proxy Re-Encryption for Secure Data Sharing in Clouds

An efficient group rekey scheme for P2P IPTV DRM system

Fully Anonymous Identity-Based Broadcast Signcryption with Public Verification

Covert Multi-Access Communication with a Non-Covert User

A Lattice-Based Certificateless Traceable Ring Signature Scheme

Tradeoff between reliability and security in block ciphering systems with physical channel errors

A Restrained Paillier Cryptosystem and Its Applications for Access Control of Common Secret