Abstract:Threshold cryptography aims at enhancing the availability and security of decryption and signature schemes by splitting private keys into several (say n) shares (typically, each of size comparable to the original secret key). In these schemes, a quorum of at least (d ≤ n) servers needs to act upon a message to produce the result (decrypted value or signature), while corrupting less than d servers maintains the scheme’s security. For about two decades, extensive study was dedicated to this subject, which created a number of notable results. So far, most practical threshold signatures, where servers act non-interactively, were analyzed in the limited static corruption model (where the adversary chooses which servers will be corrupted at the system’s initialization stage). Existing threshold encryption schemes that withstand the strongest combination of adaptive malicious corruptions (allowing the adversary to corrupt servers at any time based on its complete view), and chosenciphertext attacks (CCA) all require interaction (in the non-idealized model) and attempts to remedy this problem resulted only in relaxed schemes. The same is true for threshold signatures secure under chosenmessage attacks (CMA). It was open (for about 10 years) whether there are non-interactive threshold schemes providing the highest security (namely, CCA-secure encryption and CMA-secure signature) with scalable shares (i.e., as short as the original key) and adaptive security. This paper first surveys our ICALP 2011 work which answers this question affirmatively by presenting such efficient decryption and signature schemes within a unified algebraic framework. The paper then describes how to design on top of the surveyed system the first “forward-secure non-interactive threshold cryptosystem with adaptive security.”

Threshold Public-Key Encryption with Adaptive Security and Short Ciphertexts

Lattice-based PKEs/KEMs

Adaptive Chosen Ciphertext Secure Threshold Key Escrow Scheme from Pairing

Efficient Chosen-Ciphertext Secure Public-Key Encryption Scheme with High Leakage-Resilience.

ID-based Threshold Decryption Secure Against Adaptive Chosen-Ciphertext Attack.

Efficient Chosen Ciphertext Secure Threshold Public-Key Encryption with Forward Security

Threshold public key encryption scheme resilient against continual leakage without random oracles

Strong Leakage and Tamper-Resilient PKE from Refined Hash Proof System.

Certificateless threshold cryptosystem secure against chosen-ciphertext attack

More Efficient Public-Key Cryptography with Leakage and Tamper Resilience.

Efficient Chosen-Ciphertext Secure Certificateless Threshold Key Encapsulation Mechanism

An Efficient Threshold Key-Insulated Signature Scheme

A Secure Threshold Proxy Signature Scheme

Provably Secure Identity-based Threshold Key Escrow from Pairing.

Distributed Certificateless Key Encapsulation Mechanism Secure Against the Adaptive Adversary

New Threshold Cryptosystem against Chosen Ciphertext Attacks Based on Pairing

Construction of Dynamic Threshold Decryption Scheme from Pairing.

An Efficient Certificateless Threshold Decryption Schemes Based on Pairings

Trustless Distributed Symmetric-key Encryption

Information Security and Cryptology: Third SKLOIS Conference, Inscrypt 2007, Xining, China, August 31 - September 5, 2007, Revised Selected Papers

Efficient CCA-Secure PKE from identity-based techniques