Abstract:In public key encryption with keyword search (PEKS) framework, see Figure 1(a), the cloud server stores index $l_{w}$ and verifies the equivalence whether w=w' or not on receiving a keyword search request through a trapdoor $T_{w'}$. Aside from the traditional secrecy concerns over index, a new threat called inner keyword guessing attack which addressed the secrecy of trapdoors against off-line brute force attacks, was indicated by Chen et al. First, the index $I_{w}$ is publicly computable; second, the domain of keywords is not big enough to resist brute force attacks; and third, the cloud server can verify the equivalence between keywords of index and trapdoors by itself. As a curious server, on input a trapdoor $T_{w^{'}}$, the server can keep computing index with different keywords $w$ and tests the equivalence by itself until finding the keyword $w^{\prime}$ hidden in the trapdoors. That is, the secrecy of trapdoors can be easily broken. Furthermore, the ‘hacked trapdoor’ can be utilized to test all the index in the database, which indirectly impacts the secrecy of index. Chen et al. propose a dual-server PEKS (DS-PEKS) syntax to deal with this issue. There are a front server and a back server in their architecture (see Figure 1(b)) and the keyword search test is done by the co-operation of two servers. Assume that these two servers do not collude, the DS-PEKS scheme will be secure against offline inner keyword guessing attacks (although that the on-line inner keyword guessing attacks still work). However, several flaws occur in Chen et al.'s works so that the secrecy of index and trapdoors are not well-protected even against outside adversaries. In this work, we propose a new DS-PEKS construction based on the Cramer Shoup encryption, whose index and trapdoors are provably indistinguishable against chosen keyword attacks based on the IND-CCA2 security of the Cramer Shoup encryption without random oracle model.

A Dynamic Threshold Commercial Key Escrow Scheme Based on Conic

A Dynamic(k,n) Threshold Key Escrow Scheme

Distributed Certification Application Via a Trusted Dealer

Secure $K$k-Nn Query on Encrypted Cloud Data with Multiple Keys

Adaptive Chosen Ciphertext Secure Threshold Key Escrow Scheme from Pairing

New Constructions of Dynamic Threshold Cryptosystem

Provably Secure Identity-based Threshold Key Escrow from Pairing.

Dynamic Access Control Scheme for Secure Cloud Data with Efficient Key Management

A Fingerprint and Threshold Scheme-Based Key Generation Method

Defending Against Key Exposure in Attribute-Based Encryption

Construction of Dynamic Threshold Decryption Scheme from Pairing.

Threshold‐based Key Management Scheme for Space Network

CCA Secure Threshold KEM Scheme Against Adaptive Corruption Attacks in Standard Model

Key-Dependent Message Chosen-Ciphertext Security of the Cramer-Shoup Cryptosystem.

A Key Distribution Scheme Based on Chinese Remainder Theorem and Dynamic Grouping Management

Complex Threshold Key Management for Ad Hoc Network

Key Encapsulation Mechanism with Tight Enhanced Security in the Multi-user Setting: Impossibility Result and Optimal Tightness

A Traceable Certificateless Threshold Proxy Signature Scheme From Bilinear Pairings

Cluster Space Key Management Scheme Based on Threshold Secret Sharing and Bilinear Pairing

Provable secure dual-server public key encryption with keyword search

DTACB: Dynamic Threshold Anonymous Credentials with Batch-Showing