Abstract:Threshold cryptography aims at enhancing the availability and security of decryption and signature schemes by splitting private keys into several (say n) shares (typically, each of size comparable to the original secret key). In these schemes, a quorum of at least (d ≤ n) servers needs to act upon a message to produce the result (decrypted value or signature), while corrupting less than d servers maintains the scheme’s security. For about two decades, extensive study was dedicated to this subject, which created a number of notable results. So far, most practical threshold signatures, where servers act non-interactively, were analyzed in the limited static corruption model (where the adversary chooses which servers will be corrupted at the system’s initialization stage). Existing threshold encryption schemes that withstand the strongest combination of adaptive malicious corruptions (allowing the adversary to corrupt servers at any time based on its complete view), and chosenciphertext attacks (CCA) all require interaction (in the non-idealized model) and attempts to remedy this problem resulted only in relaxed schemes. The same is true for threshold signatures secure under chosenmessage attacks (CMA). It was open (for about 10 years) whether there are non-interactive threshold schemes providing the highest security (namely, CCA-secure encryption and CMA-secure signature) with scalable shares (i.e., as short as the original key) and adaptive security. This paper first surveys our ICALP 2011 work which answers this question affirmatively by presenting such efficient decryption and signature schemes within a unified algebraic framework. The paper then describes how to design on top of the surveyed system the first “forward-secure non-interactive threshold cryptosystem with adaptive security.”

Efficient Chosen Ciphertext Secure Threshold Public-Key Encryption with Forward Security

Threshold public key encryption scheme resilient against continual leakage without random oracles

Efficient Chosen-Ciphertext Secure Certificateless Threshold Key Encapsulation Mechanism

Efficient Chosen Ciphertext Secure Public-Key Encryption under Factoring Assumption

Information Security and Cryptology: Third SKLOIS Conference, Inscrypt 2007, Xining, China, August 31 - September 5, 2007, Revised Selected Papers

Adaptive Chosen Ciphertext Secure Threshold Key Escrow Scheme from Pairing

Efficient and Proactive Threshold Signcryption

Certificateless threshold cryptosystem secure against chosen-ciphertext attack

ID-based Threshold Decryption Secure Against Adaptive Chosen-Ciphertext Attack.

Public- Key Encryption Scheme with Selective Opening Chosen- Ciphertext Security Based on the Decisional Diffie- Hellman Assumption

A New Construction of Threshold Cryptosystems Based on RSA.

Efficient Chosen-Ciphertext Secure Public-Key Encryption Scheme with High Leakage-Resilience.

Forward-secure public-key encryption scheme with untrusted update:security model and constructions

New Threshold Cryptosystem against Chosen Ciphertext Attacks Based on Pairing

Identity-Based Encryption With Forward Security

Certificateless Public Key Encryption with Cryptographic Reverse Firewalls

Public Key Encryption Without Random Oracle Made Truly Practical

New Constructions of Dynamic Threshold Cryptosystem

Secure Anonymous Threshold Subliminal Channel for Ad Hoc Environments

Public Key Encryption Resilient to Leakage and Tampering Attacks.

Privacy-preserving server-supported decryption