Abstract:Driven by the open problem raised by Hofheinz and Kiltz (J Cryptol 25(3):484–527, 2012), we study the formalization of lattice-based programmable hash function (PHF) and give three types of concrete constructions by using several techniques such as a novel combination of cover-free sets and lattice trapdoors. Under the inhomogeneous small integer solution (ISIS) assumption, we show that any (non-trivial) lattice-based PHF is a collision-resistant hash function, which gives a direct application of this new primitive. We further demonstrate the power of lattice-based PHF by giving generic constructions of signature and identity-based encryption (IBE) in the standard model, which not only provide a way to unify several previous lattice-based schemes using the partitioning proof techniques, but also allow us to obtain new short signature schemes and IBE schemes from (ideal) lattices. Specifically, by instantiating the generic constructions with our Type-II and Type-III PHF constructions, we immediately obtain two short signatures and two IBE schemes with asymptotically much shorter keys. A major downside which inherits from our Type-II and Type-III PHF constructions is that we can only prove the security of the new signatures and IBEs in the bounded security model that the number Q of the adversary's queries is required to be known in advance. Another downside is that the computational time of our new signatures and IBEs is a linear function of Q , which is large for typical parameters. To overcome the above limitations, we also give a refined way of using Type-II and Type-III PHFs to construct lattice-based short signatures with short verification keys in the full security model. In particular, our methods depart from the confined guessing technique of Böhl et al. (Eurocrypt'13) that was used to construct previous standard model short signature schemes with short verification keys by Ducas and Micciancio (Crypto'14) and by Alperin-Sheriff (PKC'15) and allow us to achieve much tighter security from weaker hardness assumptions.

Attack on Recent Homomorphic Encryption Scheme over Integers

Cryptanalysis of a Homomorphic Encryption Scheme Over Integers.

Cryptanalysis of a homomorphic encryption scheme from ISIT 2008

Fully Homomorphic Encryption over the Integers

Homomorphic Encryption within Lattice-Based Encryption System

Cryptanalysis of a Public Key Cryptosystem Based on Diophantine Equations Via Weighted LLL Reduction.

HOMOMORPHIC OPERATIONS WITHIN IDEAL LATTICE BASED ENCRYPTION SYSTEMS

Faster Fully Homomorphic Encryption

A Homomorphic Encryption Scheme with Adaptive Chosen Ciphertext Security but Without Random Oracle

Fully Homomorphic Encryption Algorithm Based on Integer Polynomial Ring

An Unbounded Fully Homomorphic Encryption Scheme Based on Ideal Lattices and Chinese Remainder Theorem

Identity-Based Signcryption from Lattices

Lattice-Based Programmable Hash Functions and Applications

Homomorphic Properties Within Lattice-Based Encryption Systems

Low-Complexity Integer Divider Architecture for Homomorphic Encryption

Attacking (EC)DSA scheme with ephemeral keys sharing specific bits

An Attack on $p$-adic Lattice Public-key Cryptosystems and Signature Schemes

Fully Homomorphic Encryption Scheme Over Integers Based on DGHV Scheme

Improved Cryptanalysis of HFEv- Via Projection.

Linearly Homomorphic Signature with Tight Security on Lattice

Lattice-Based Linearly Homomorphic Signature Scheme over F 2