Abstract:Signcryption as a cryptographic primitive can carry out signature and encryption simultaneously at a remarkably reduced cost. Identity-based cryptography is more convenient than public key infrastructure-based cryptography in certificate management. As a result, identity-based signcryption has been studied extensively, and many efficient and provably secure constructions have been proposed. However, most of these schemes are based on intractability assumptions from number theory, and these assumptions have been threatened by the booming quantum computation. Therefore, a recent trend in cryptography is to construct cryptosystems that are based on lattice-based intractability assumptions because of their plausible features of quantum attack resistance. In this paper, several identity-based signcryption schemes from lattice hardness assumptions are proposed. In the standard model, these schemes are indistinguishable against inner adaptively chosen ciphertext attacks (IND-CCA2) and strongly unforgeable against inner chosen message attacks. In our construction, it does not matter whether the original encryption scheme used to construct signcryption is deterministic or probabilistic; the resulted signcryption schemes can reach IND-CCA2 security. To achieve this, we carefully combine three techniques-the identity-based encryption from lattice due to Agrawal-Boneh-Boyen (EUROCRYPT 2010), the framework of lattice-based short signature due to Boyen (Public Key Cryptography 2010), and the Canetti-Halevi-Katz (abbr. CHK) technique, with necessary and tailored optimization-for transforming an (l + 1)-level indistinguishable under chosen plaintext attack secure hierarchical identity-based encryption (HIBE) into an l level IND-CCA2 secure HIBE scheme. In addition, our security proof also contains a more efficient simulation tool that might have separate interest in cryptographic applications. Copyright (C) 2015 John Wiley & Sons, Ltd.

Analysis of an Identity-Based Signcryption Scheme in the Standard Model

An Efficient Identity-Based Ring Signcryption Scheme without Random Oracles

Identity-Based Signcryption from Lattices

Analysis and improvement of a signcryption scheme with key privacy

Provable Secure Identity Based Generalized Signcryption Scheme

Security Flaw of an ECC-based Signcryption Scheme with Anonymity.

Efficient Lattice-Based Signcryption in Standard Model

2 The Definition and Security Models of Signcryption with Key Privacy

Attribute-Based Signcryption from Lattices in the Standard Model

Identity-based Authenticated Encryption with Identity Confidentiality

Improvement of Provably Secure Self-Certified Proxy Convertible Authenticated Encryption Scheme

Insecurity of an Efficient Identity-Based Proxy Signature in the Standard Model.

Efficient Secret Authenticatable Anonymous Signcryption Scheme with Identity Privacy

An Efficient Signcryption Scheme with Key Privacy and Its Extension to Ring Signcryption*

A Fully Secure Lattice-Based Signcryption with Designated Equality Test in Standard Model

An Efficient Signcryption Scheme With Key Privacy

Fully Anonymous Identity-Based Broadcast Signcryption with Public Verification

A generalized signcryption scheme with forward security of multiple private key generators

Cryptanalysis of a Certificateless Signcryption Scheme for Wireless Sensor Networks in Ubiquitous Healthcare Systems

New Fuzzy Identity-Based Encryption in the Standard Model

Comments on an identity-based signature scheme for VANETs