Abstract:Public key encryption with equality test (PKEET) is a cryptographic primitive that enables a tester to determine whether two ciphertexts encrypted with same or different public keys have been generated from the same message without decryption. Previous studies extended PKEET to public key encryption with designated-position fuzzy equality test (PKE-DFET), enabling testers to verify whether plaintexts corresponding to two ciphertexts are equal while ignoring specific bits at designated positions. In this work, we have filled the research gap in the identity-based encryption (IBE) cryptosystems for this primitive. Furthermore, although our authorization method is the all-or-nothing (AoN) type, it overcomes the shortcomings present in the majority of AoN-type authorization schemes. In our scheme, equality tests can only be performed between a ciphertext and a given plaintext. Specifically, even if a tester acquires multiple AoN-type authorizations, it cannot conduct unpermitted equality tests between users. This significantly reduces the risk of user privacy leaks when handling sensitive information in certain scenarios, while still retaining the flexible and simple characteristics of AoN-type authorizations. We use the Chinese national cryptography standard SM9-IBE algorithm to provide the concrete construction of our scheme, enhancing the usability and security of our scheme, while making deployment more convenient. Finally, we prove that our scheme achieves F-OW-ID-CCA security when the adversary has the trapdoor of the challenge ciphertext, and achieves IND-ID-CCA security when the adversary does not have the trapdoor of the challenge ciphertext.

Key Updating Technique in Identity-Based Encryption

Identity-Based Encryption with Verifiable Outsourced Revocation

Anonymous and Adaptively Secure Revocable IBE with Constant Size Public Parameters

Revocable Hierarchical Identity-Based Encryption from Multilinear Maps

An Authentication Scheme Using Identity-based Encryption & Blockchain

Securing Key Issuing in Peer-to-peer Networks.

Improved Hierarchical Identity-Based Parallel Key-Insulated Encryption

Defending Against Key Exposure in Attribute-Based Encryption

An attribute based encryption scheme with fine-grained attribute revocation

Anonymous Identity-Based Encryption with Identity Recovery

Generic Methods To Achieve Tighter Security Reductions For A Category Of Ibe Schemes

SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test

Accountable authority identity-based encryption with public traceability

Unbounded and revocable hierarchical identity-based encryption with adaptive security, decryption key exposure resistant, and short public parameters

Fast Identity-Based Encryption Using Combined Public Keys

Key escrow-free attribute based encryption with user revocation

Enabling Efficient User Revocation in Identity-based Cloud Storage Auditing for Shared Big Data

On Key Issuing Privacy in Distributed Online Social Networks

Efficient User Revocation for Privacy-Aware PKI

Dynamic Key-Updating: Privacy-Preserving Authentication for RFID Systems

Identity-Based Parallel Key-Insulated Encryption with Multiple Long-Term Keys