A New Leakage-Resilient Ibe Scheme In The Relative Leakage Model

Yu Chen,Song Luo,Zhong Chen

DOI: https://doi.org/10.1007/978-3-642-22348-8_22

2011-01-01

Abstract:We propose the first leakage-resilient Identity-Based Encryption (IBE) scheme with full domain hash structure. Our scheme is leakage-resilient in the relative leakage model and the random oracle model under the decisional bilinear Diffie-Hellman (DBDH) assumption.

What problem does this paper attempt to address?

New Fully Secure Hierarchical Identity-Based Encryption with Constant Size Ciphertexts

Song Luo,Yu Chen,Jianbin Hu,Zhong Chen

DOI: https://doi.org/10.1007/978-3-642-21031-0_5

2011-01-01

Abstract:Hierarchical identity-based encryption (HIBE) is a generalization of identity-based encryption (IBE) which allows for a hierarchy of identities where any parent identities can derive secret keys for child identities. In this paper, we propose a new HIBE scheme with constant size ciphertexts and short parameters in prime order groups using symmetric pairing. We use a new technique called "hybrid identity vector" to make the key derivation feasible. Our scheme is proven fully secure under the DBDH and D-Linear assumptions by using dual system encryption. Based on our HIBE scheme, we propose a new WIBE (IBE with wildcards) scheme with constant size ciphertexts.
A Variant Of Boyen-Waters Anonymous Ibe Scheme

Song Luo,Qingni Shen,Yongming Jin,Yu Chen,Zhong Chen,Sihan Qing

DOI: https://doi.org/10.1007/978-3-642-25243-3_4

2011-01-01

Abstract:An identity-based encryption (IBE) scheme is called anonymous if the ciphertext leaks no information about the recipient's identity. In this paper, we present a novel anonymous identity-based encryption scheme. Our scheme comes from the analysis of Boyen-Waters anonymous IBE Scheme in which we find a method to construct anonymous IBE schemes. We show that Boyen-Waters anonymous IBE scheme can be transformed from BB1-IBE scheme. Our scheme is also transformed from BB1-IBE scheme and can be seemed as a variant of Boyen-Waters anonymous IBE scheme. The security proof shows the transformed scheme has the same semantic security as the original scheme and has anonymous security. We prove anonymity under the Decision Linear assumption.
New Fuzzy Identity-Based Encryption in the Standard Model

Yanli Ren,Dawu Gu,Shuozhong Wang,Xinpeng Zhang

DOI: https://doi.org/10.15388/informatica.2010.296

2010-01-01

Informatica

Abstract:In a fuzzy identity-based encryption (IBE) scheme, a user with the secret key for an identity ID is able to decrypt a ciphertext encrypted with another identity ID' if and only if ID and ID' are within a certain distance of each other as judged by some metric. Fuzzy IBE also allows to encrypt a document to all users that have a certain set of attributes. In 2005, Sahai and Waters first proposed the notion of fuzzy IBE and proved the security of their scheme under the selective-ID model. Currently, there is no fuzzy IBE scheme available that is fully CCA2 secure in the standard model. In this paper, we propose a new fuzzy IBE scheme which achieves IND-FID-CCA2 security in the standard model with a tight reduction. Moreover, the size of public parameters is independent of the number of attributes associated with an identity.
Identity-Based Encryption Secure Against Selective Opening Chosen-Ciphertext Attack.

Junzuo Lai,Robert H. Deng,Shengli Liu,Jian Weng,Yunlei Zhao

DOI: https://doi.org/10.1007/978-3-642-55220-5_5

2015-01-01

Abstract:Security against selective opening attack (SOA) requires that in a multi-user setting, even if an adversary has access to all ciphertexts from users, and adaptively corrupts some fraction of the users by exposing not only their messages but also the random coins, the remaining unopened messages retain their privacy. Recently, Bellare, Waters and Yilek considered SOA-security in the identity-based setting, and presented the first identity-based encryption (IBE) schemes that are proven secure against selective opening chosen plaintext attack (SO-CPA). However, how to achieve SO-CCA security for IBE is still open. In this paper, we introduce a new primitive called extractable IBE and define its IND-ID-CCA security notion. We present a generic construction of SO-CCA secure IBE from an IND-ID-CCA secure extractable IBE with "One-Sided Public Openability"(1SPO), a collision-resistant hash function and a strengthened cross-authentication code. Finally, we propose two concrete constructions of extractable 1SPO-IBE schemes, resulting in the first simulation-based SO-CCA secure IBE schemes without random oracles.
Anonymous Identity-Based Encryption with Bounded Leakage Resilience

Pengtao Liu,Chengyu Hu,Shanqing Guo,Yilei Wang

DOI: https://doi.org/10.1109/waina.2015.27

2017-01-01

International Journal of High Performance Computing and Networking

Abstract:Memory attacks, inspired by recent realistic physical attacks, have broken many cryptographic schemes which were considered secure. In this paper, we consider the memory leakage resilience in anonymous identity-based encryption schemes. We construct a leakage-resilient anonymous identity based encryption scheme based on dual system encryption. Inspired by Lewko et al.'s techniques, our scheme is built in composite order groups which have four prime order subgroups and blind the public parameters and cipher texts using the random elements of same subgroup to achieve the anonymity. Moreover, we analyze the security of our scheme in the full adaptive-ID model rather than the selective-ID model.
Identity-based encryption based on DHIES.

Yu Chen,Manuel Charlemagne,Zhi Guan,Jian-bin Hu,Zhong Chen

DOI: https://doi.org/10.1145/1755688.1755699

2010-01-01

Abstract:ABSTRACTMost traditional public key cryptosystems are constructed upon algebraically rich structures, which makes their key pairs combinable, i.e., the combination of some private keys and their corresponding public keys could form a new key pair. Exploring such combinable property, this paper proposes a novel Identity-Based Encryption (IBE) scheme based on the Diffie-Hellman Integrated Encryption Scheme (DHIES) with quadratic key combination structure from bilinear maps. The new scheme has a number of advantages over other IBE schemes. First, it uses DHIES to fulfill encryption, thus naturally obtains the security against adaptive chosen ciphertext attack from DHIES. Second, it is interoperable with existing security systems based on DHIES. Third, compared to many pairing-based IBE schemes, it only requires pairing computation during public key generation and there is no need for special hash function. We prove that our scheme is selective identity chosen ciphertext secure in the random oracle model assuming DHIES is chosen ciphertext secure. Additionally, the extract algorithm of our scheme also implies an identity-based short signature scheme.
Fully Secure Anonymous Identity-Based Encryption under Simple Assumptions

Yanli Ren,Shuozhong Wang,Xinpeng Zhang,Zhenxing Qian

DOI: https://doi.org/10.1109/mines.2010.96

2010-01-01

Abstract:Anonymous identity-based encryption systems can be used to protect users’ privacy and construct Public key Encryption with Keyword Search (PEKS) schemes where the ciphertext does not leak the identity of the recipient. Currently, there is no anonymous IBE scheme that is fully secure under simple assumptions without random oracles. In this paper, we propose an anonymous IBE scheme using the approach of Dual System Encryption. The scheme is fully secure without random oracles based on decisional bilinear Diffie-Hellman (BDH) and linear assumptions, and the security reduction is tight. These two assumptions are simple and our scheme is more secure than the previous anonymous IBE schemes.
Anonymous and Adaptively Secure Revocable IBE with Constant Size Public Parameters

Jie Chen,Hoon Wei Lim,San Ling,Le Su,Huaxiong Wang

DOI: https://doi.org/10.48550/arXiv.1210.6441

2012-10-24

Abstract:In Identity-Based Encryption (IBE) systems, key revocation is non-trivial. This is because a user's identity is itself a public key. Moreover, the private key corresponding to the identity needs to be obtained from a trusted key authority through an authenticated and secrecy protected channel. So far, there exist only a very small number of revocable IBE (RIBE) schemes that support non-interactive key revocation, in the sense that the user is not required to interact with the key authority or some kind of trusted hardware to renew her private key without changing her public key (or identity). These schemes are either proven to be only selectively secure or have public parameters which grow linearly in a given security parameter. In this paper, we present two constructions of non-interactive RIBE that satisfy all the following three attractive properties: (i) proven to be adaptively secure under the Symmetric External Diffie-Hellman (SXDH) and the Decisional Linear (DLIN) assumptions; (ii) have constant-size public parameters; and (iii) preserve the anonymity of ciphertexts---a property that has not yet been achieved in all the current schemes.

Cryptography and Security
On Constructing Pairing-Free Identity-Based Encryptions

Xin Wang,Bei Liang,Shimin Li,Rui Xue

DOI: https://doi.org/10.1007/978-3-319-99136-8_17

2018-01-01

Abstract:In this paper, we focus on constructing IBE from hardness assumptions without pairings. Especially, we propose two IBE schemes that are provably secure under new number theoretic assumptions over the group Z(N2)*, in the Random Oracle (RO) model. We essentially take advantage of the underlying algebraic structure to overcome the difficulties in devising an IBE scheme.More precisely, our contributions are two-fold and can be summarised as follows: (i) We give two concrete pairing-free constructions of IBE based on a variant of DDH assumption and Paillier's DCR assumption respectively over the group Z(N2)*. These schemes are quite efficient and easily to be proven IND-ID-CPA in the random oracle model. (ii) We also provide a generic construction of selectively secure IBE from DDH group with a DL-solvable subgroup in the standard model by employing puncturable PRFs and indistinguishability obfuscation.
Anonymous Identity-Based Encryption Scheme Without Random Oracles

REN Yanli,GU Dawu,WANG Shuozhong,ZHANG Xinpeng

DOI: https://doi.org/10.3969/j.issn.0253-2778.2012.04.006

2012-01-01

Abstract:The anonymous identity-based encryption(IBE) schemes are currently only selective-ID secure without random oracles or provably secure under a complex assumption.An anonymous IBE scheme based on decisional bilinear Diffie-Hellman(BDH) assumption in a group of composite order was proposed,which is ANON-IND-ID-CPA secure without random oracles and only needs two bilinear pairing computations.This scheme is more secure and efficient than the existing ones.
Generic Methods To Achieve Tighter Security Reductions For A Category Of Ibe Schemes

Yu Chen,Liqun Chen,Zhong Chen

DOI: https://doi.org/10.1007/978-3-642-21031-0_4

2011-01-01

Abstract:We show that Katz-Wang's duplicating key and ciphertext technique can be extended to a generic method that can be used in a certain category of Identity-Based Encryption (IBE) schemes for the purposes of improving their security reductions. We further develop two refined approaches by adapting the randomness reuse technique in the Katz-Wang technique: one is public key duplication, and the other is master key duplication. Compared to the Katz-Wang technique, our two refined approaches do not only improve the performances of the resulting IBE schemes but also enable a reduction algorithm to deal with decryption queries correctly and therefore can achieve chosen ciphertext security. As case studies, we apply these two approaches to modify the Boneh-Franklin IBE scheme and the Boneh-Boyen IBE scheme, respectively. Both of the modifications improve the tightness of security reductions, compared to the original schemes, with a reasonably low cost.
Fuzzy Identity-Based Encryption

Amit Sahai,Brent Waters

DOI: https://doi.org/10.1007/11426639_27

2005-01-01

Abstract:We introduce a new type of Identity-Based Encryption (IBE) scheme that we call Fuzzy Identity-Based Encryption. In Fuzzy IBE we view an identity as set of descriptive attributes. A Fuzzy IBE scheme allows for a private key for an identity, ω, to decrypt a ciphertext encrypted with an identity, ω ′, if and only if the identities ω and ω ′ are close to each other as measured by the “set overlap” distance metric. A Fuzzy IBE scheme can be applied to enable encryption using biometric inputs as identities; the error-tolerance property of a Fuzzy IBE scheme is precisely what allows for the use of biometric identities, which inherently will have some noise each time they are sampled. Additionally, we show that Fuzzy-IBE can be used for a type of application that we term “attribute-based encryption”.In this paper we present two constructions of Fuzzy IBE schemes. Our constructions can be viewed as an Identity-Based Encryption of a message under several attributes that compose a (fuzzy) identity. Our IBE schemes are both error-tolerant and secure against collusion attacks. Additionally, our basic construction does not use random oracles. We prove the security of our schemes under the Selective-ID security model.
Dual System Encryption Revisited: Attaining Fully Secure Identity-Based Encryption and Its Extensions

LUO Song,CHEN Yu,CHEN Zhong

DOI: https://doi.org/10.3969/j.issn.1001-2486.2012.02.002

2012-01-01

Abstract:Dual system encryption was first proposed by Waters as a powerful method to prove full security for identity-based encryption(IBE) schemes and its extensions.To construct fully secure schemes,the application of dual system encryption is considered and a generic construction of fully secure schemes is presented.The construction combines a dual system encryption IBE scheme with a normal secure scheme and produces a new scheme which can be proven secure by dual system encryption.Based on the proposed generic construction,an instantiation,which is a hierarchical identity-based encryption(HIBE) scheme with constant ciphertext size,is presented.This scheme is more efficient than Waters' original dual system encryption HIBE scheme,and it is proven fully secure under the Decision BDH and Decision Linear assumptions.
Identity-Based Encryption from the Weil Pairing

Dan Boneh,Matt Franklin

DOI: https://doi.org/10.1007/3-540-44647-8_13

2001-01-01

Abstract:We propose a fully functional identity-based encryption scheme (IBE). The scheme has chosen ciphertext security in the random oracle model assuming an elliptic curve variant of the computational Diffie-Hellman problem. Our system is based on the Weil pairing. We give precise definitions for secure identity based encryption schemes and give several applications for such systems.
Leakage-resilient / with optimal leakage rates from lattices

Qiqi Lai,Feng-Hao Liu,Zhedong Wang

DOI: https://doi.org/10.1007/s10623-024-01358-1

IF: 1.4

2024-02-25

Designs Codes and Cryptography

Abstract:We derive the first adaptively secure identity-based encryption ( ) and attribute-based encryption ( ) for t -conjunctive normal form formula (t-CNF), and selectively secure for general circuits from lattices, with leakage rates, in the both relative leakage model and bounded retrieval model ( ). To achieve this, we first identify a new fine-grained security notion for —partially adaptive/selective security, and instantiate this notion from the learning with errors ( ) assumption. Then, by using this notion, we design a new key compressing mechanism for identity-based/attributed-based weak hash proof system ( / - ) for various policy classes, achieving (1) succinct secret keys and (2) adaptive/selective security matching the existing non-leakage resilient lattice-based designs. Using the existing connection between weak hash proof system and leakage resilient encryption, the succinct-key / - can yield the desired leakage resilient / schemes with the optimal leakage rates in the relative leakage model. Finally, by further improving the prior analysis of the compatible locally computable extractors, we can achieve the optimal leakage rates in the .

mathematics, applied,computer science, theory & methods
Anonymous Identity-Based Encryption with Identity Recovery

Xuecheng Ma,Xin Wang,Dongdai Lin

DOI: https://doi.org/10.48550/arXiv.1806.05943

2018-06-15

Abstract:Anonymous Identity-Based Encryption can protect privacy of the receiver. However, there are some situations that we need to recover the identity of the receiver, for example a dispute occurs or the privacy mechanism is abused. In this paper, we propose a new concept, referred to as Anonymous Identity-Based Encryption with Identity Recovery(AIBEIR), which is an anonymous IBE with identity recovery property. There is a party called the Identity Recovery Manager(IRM) who has a secret key to recover the identity from the ciphertext in our scheme. We construct it with an anonymous IBE and a special IBE which we call it testable IBE. In order to ensure the semantic security in the case where the identity recovery manager is an adversary, we define a stronger semantic security model in which the adversary is given the secret key of the identity recovery manager. To our knowledge, we propose the first AIBEIR scheme and prove the security in our defined model.

Cryptography and Security
Hierarchical Identity-Based Encryption Without Key Delegation in Decryption.

Song Luo,Zhong Chen

DOI: https://doi.org/10.1504/ijguc.2014.060182

2014-01-01

International Journal of Grid and Utility Computing

Abstract:Hierarchical Identity-Based Encryption (HIBE) is a generalisation of Identity- Based Encryption (IBE) which mirrors an organisational hierarchy. However, when the user decrypts a ciphertext encrypted to a hierarchical identity, he/she should know the exact hierarchical identity in order to run the delegate algorithm to get the secret key corresponding to the target hierarchical identity if the hierarchical identity linked with his/her key is a prefix of the target hierarchical identity. In this paper, we consider a new concept called HIBE without key delegation in decryption. In such HIBE systems, the user can decrypt the ciphertext directly without running the delegate algorithm even if his hierarchical identity is only a prefix of the target hierarchical identity. We present two HIBE systems, which are proven secure in the standard model under the decision BDH and l-BDHE assumptions, respectively. Both systems have the same decryption efficiency in pairing, compared with BB1-HIBE system and BBG-HIBE system, respectively.
A novel commutative blinding identity based encryption scheme

Yu Chen,Song Luo,Jianbin Hu,Zhong Chen

DOI: https://doi.org/10.1007/978-3-642-27901-0_7

2012-01-01

Abstract:In EUROCRYPT 2004, Boneh and Boyen presented two efficient Identity Based Encryption (IBE) schemes that are selective-identity secure in the standard model. Particularly, the first one known as BB1 -IBE, which is characterized by commutative blinding technique (BB1 -style), distinguishes itself as the most fertile ground for many applications. They also proved that BB1 -IBE is fully secure in the random oracle model but with a looser reduction. In this paper, we propose a novel IBE scheme of BB1 -style, which is fully secure in the random oracle model with a tighter reduction. Additionally, we give a chosen ciphertext secure construction of our scheme from twin technique.
Cocks' Identity-Based Encryption In The Standard Model, Via Obfuscation Techniques (Short Paper)

Xin Wang,Shimin Li,Rui Xue

DOI: https://doi.org/10.1007/978-3-030-26834-3_16

2019-01-01

Abstract:Identity-based encryption (IBE) is an attractive primitive in modern cryptography. Cocks first gave an elegant construction of IBE under Quadratic Residuosity (QR) assumption. Unfortunately, its security works only in the Random Oracle (RO) model. In this work, we aim at providing Cock's scheme with provable security in the standard model. Specifically, we modify Cocks' scheme by explicitly instantiating the hash function using indistinguishability obfuscation in two different ways which yield two variants of Cocks' scheme. Their security are promised under well-defined selective-ID and adaptive-ID model respectively. As an additional contribution, we adapt the same method into the Boneh, LaVigne, Sabin (BLS) e(th) residuosity based IBE cryptosystem and obtain an adaptive chosen-ID secure scheme under Modified e(th) Residuosity (MER) assumption.
Accountable authority identity-based encryption with public traceability

Junzuo Lai,Robert H. Deng,Yunlei Zhao,Jian Weng

DOI: https://doi.org/10.1007/978-3-642-36095-4_21

2013-01-01

Abstract:At Crypto'07, Goyal introduced the notion of accountable authority identity-based encryption (A-IBE) in order to mitigate the inherent key escrow problem in identity-based encryption, and proposed two concrete constructions. In an A-IBE system, if the private key generator (PKG) distributes a decryption key or produces an unauthorized decryption box for a user maliciously, it runs the risk of being caught and sued in the court of law with the help of a tracing algorithm. Subsequent efforts focused on constructions of A-IBE schemes with enhanced security. In these A-IBE constructions, the tracing algorithm needs to take a user's decryption key as input. If the user lost his key or is deliberately uncooperative in court, then we cannot implicate the PKG or the user. An interesting open problem left by Goyal et al. at CCS'08 is to consider the possibility of tracing a decryption box using only a public tracing key, or with the assistance of a tracing authority. In this paper, we address this problem positively. We first extend the original model of A-IBE to accommodate public traceability, and then propose an A-IBE scheme in the new model. To the best of our knowledge, the proposed scheme is the first A-IBE with public traceability.

A New Leakage-Resilient Ibe Scheme In The Relative Leakage Model

New Fully Secure Hierarchical Identity-Based Encryption with Constant Size Ciphertexts

A Variant Of Boyen-Waters Anonymous Ibe Scheme

New Fuzzy Identity-Based Encryption in the Standard Model

Identity-Based Encryption Secure Against Selective Opening Chosen-Ciphertext Attack.

Anonymous Identity-Based Encryption with Bounded Leakage Resilience

Identity-based encryption based on DHIES.

Fully Secure Anonymous Identity-Based Encryption under Simple Assumptions

Anonymous and Adaptively Secure Revocable IBE with Constant Size Public Parameters

On Constructing Pairing-Free Identity-Based Encryptions

Anonymous Identity-Based Encryption Scheme Without Random Oracles

Generic Methods To Achieve Tighter Security Reductions For A Category Of Ibe Schemes

Fuzzy Identity-Based Encryption

Dual System Encryption Revisited: Attaining Fully Secure Identity-Based Encryption and Its Extensions

Identity-Based Encryption from the Weil Pairing

Leakage-resilient / with optimal leakage rates from lattices

Anonymous Identity-Based Encryption with Identity Recovery

Hierarchical Identity-Based Encryption Without Key Delegation in Decryption.

A novel commutative blinding identity based encryption scheme

Cocks' Identity-Based Encryption In The Standard Model, Via Obfuscation Techniques (Short Paper)

Accountable authority identity-based encryption with public traceability