Abstract:We study simulation-based, selective opening security against chosen-ciphertext attacks (SIM-SO-CCA security) for public key encryption (PKE). In a selective opening, chosen-ciphertext attack (SO-CCA), an adversary has access to a decryption oracle, sees a vector of ciphertexts, adaptively chooses to open some of them, and obtains the corresponding plaintexts and random coins used in the creation of the ciphertexts. The SIM-SO-CCA notion captures the security of unopened ciphertexts with respect to probabilistic polynomial-time (ppt) SO-CCA adversaries in a semantic way: what a ppt SO-CCA adversary can compute can also be simulated by a ppt simulator with access only to the opened messages. Building on techniques used to achieve weak deniable encryption and non-committing encryption, Fehr et al. (Eurocrypt 2010) presented an approach to constructing SIM-SO-CCA secure PKE from extended hash proof systems (EHPSs), collision-resistant hash functions and an information-theoretic primitive called Cross Authentication Codes (XACs). We generalize their approach by introducing a special type of Key Encapsulation Mechanism (KEM) and using it to build SIM-SO- CCA secure PKE. We investigate what properties are needed from the KEM to achieve SIM-SO-CCA security. We also give three instantiations of our construction. The first uses hash proof systems, the second relies on the n-Linear assumption, and the third uses indistinguishability obfuscation (iO) in combination with extracting, puncturable Pseudo-Random Functions in a similar way to Sahai and Waters (STOC 2014). Our results establish the existence of SIM-SO-CCA secure PKE assuming only the existence of one-way functions and iO. This result further highlights the simplicity and power of iO in constructing different cryptographic primitives.

Constructing practical signcryption KEM from standard assumptions without random oracles

Direct Construction of Signcryption Tag-KEM from Standard Assumptions in the Standard Model

Lattice-based PKEs/KEMs

A New Designated Verifier Proxy Signature in Standard Model

Efficient Signcryption Key Encapsulation without Random Oracles

Authenticated Key Exchange and Signatures with Tight Security in the Standard Model.

Improvement of Provably Secure Self-Certified Proxy Convertible Authenticated Encryption Scheme

Identity based signcryption scheme without random oracles

A generic construction of identity-based signcryption

Key Encapsulation Mechanism with Tight Enhanced Security in the Multi-user Setting: Impossibility Result and Optimal Tightness

Sign-Then-Encrypt with Security Enhancement and Compressed Ciphertext

Strong Key-Insulated Signature in the Standard Model

Public Key Cryptosystems Secure Against Memory Leakage Attacks

Public Key Encryption Without Random Oracle Made Truly Practical

Cryptanalysis of an Identity Based Signcryption without Random Oracles

Simulation-Based Selective Opening Cca Security For Pke From Key Encapsulation Mechanisms

Certificateless Key-Insulated Signature Without Random Oracles

Two-Pass Authenticated Key Exchange with Explicit Authentication and Tight Security.

Tightly Sim-So-Cca Secure Public Key Encryption From Standard Assumptions

Efficient verifiably encrypted signature scheme without random oracles

CCA-Secure IB-KEM from Identity-Based Extractable Hash Proof System