Abstract:Public key encryption with equality test (PKEET) is a cryptographic primitive that enables a tester to determine whether two ciphertexts encrypted with same or different public keys have been generated from the same message without decryption. Previous studies extended PKEET to public key encryption with designated-position fuzzy equality test (PKE-DFET), enabling testers to verify whether plaintexts corresponding to two ciphertexts are equal while ignoring specific bits at designated positions. In this work, we have filled the research gap in the identity-based encryption (IBE) cryptosystems for this primitive. Furthermore, although our authorization method is the all-or-nothing (AoN) type, it overcomes the shortcomings present in the majority of AoN-type authorization schemes. In our scheme, equality tests can only be performed between a ciphertext and a given plaintext. Specifically, even if a tester acquires multiple AoN-type authorizations, it cannot conduct unpermitted equality tests between users. This significantly reduces the risk of user privacy leaks when handling sensitive information in certain scenarios, while still retaining the flexible and simple characteristics of AoN-type authorizations. We use the Chinese national cryptography standard SM9-IBE algorithm to provide the concrete construction of our scheme, enhancing the usability and security of our scheme, while making deployment more convenient. Finally, we prove that our scheme achieves F-OW-ID-CCA security when the adversary has the trapdoor of the challenge ciphertext, and achieves IND-ID-CCA security when the adversary does not have the trapdoor of the challenge ciphertext.

Identity-Based Threshold Key-Insulated Encryption Without Random Oracles

Identity-based parallel key-insulated encryption without random oracles: security notions and construction

Identity-Based Strong Key-Insulated Signature Without Random Oracles

Identity-based key-insulated signature with secure key-updates

Improved Hierarchical Identity-Based Parallel Key-Insulated Encryption

Identity-Based Key-Insulated Signcryption

ID-based Threshold Decryption Secure Against Adaptive Chosen-Ciphertext Attack.

CCA2 Secure (hierarchical) Identity-Based Parallel Key-Insulated Encryption Without Random Oracles

Defending Against Key Exposure in Attribute-Based Encryption

Fully Secure Anonymous Identity-Based Encryption under Simple Assumptions

Certificateless Strong Key-Insulated Signature

Cryptographic Reverse Firewalls for Identity-Based Encryption.

Certificateless Key-Insulated Signature Without Random Oracles

Anonymous Identity-Based Encryption Scheme Without Random Oracles

SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test

Fully Secure Wicked Identity-Based Encryption Against Key Leakage Attacks

Provably Secure Identity-based Threshold Key Escrow from Pairing.

Dealerless Corporate Key Generation for Identity-Based Encryption Schemes.

Identity-Based Parallel Key-Insulated Encryption with Multiple Long-Term Keys

Threshold public key encryption scheme resilient against continual leakage without random oracles

A New Chosen Ciphertext Secure ID-Based Threshold Decryption Scheme from Pairing