Variation of Cramer-Shoup Public Key Scheme

HF Zhu,L Chan,XT Deng

DOI: https://doi.org/10.1049/el:19990701

1999-01-01

Electronics Letters

Abstract:A variation of Cramer-Shoup's public key scheme is presented. It is shown that the new public key scheme is also secure against adaptive chosen cipher-text attack. In addition the new scheme is simpler and requires less computation than the original scheme.

What problem does this paper attempt to address?

Public- Key Encryption Scheme with Selective Opening Chosen- Ciphertext Security Based on the Decisional Diffie- Hellman Assumption

Shengli Liu,Fangguo Zhang,Kefei Chen

DOI: https://doi.org/10.1002/cpe.3021

2013-01-01

Abstract:SUMMARYChosen‐ciphertext security has been well‐accepted as a standard security notion for public‐key encryption. But in a multi‐user surrounding, it may not be sufficient, because the adversary may corrupt some users to obtain the random coins as well as the plaintexts used to generate ciphertexts. The attack is named ‘selective opening attack’. We study how to achieve full‐fledged chosen‐ciphertext security in selective opening setting directly from the Decisional Diffie–Hellman assumption. Our construction is actually a tag‐based public‐key encryption scheme free of chameleon hashing and has a tight security reduction to the Decisional Diffie–Hellman assumption and the collision‐resistant assumption of hash functions. The tag for each ciphertext is generated in a flexible way to serve the chosen‐ciphertext security proof in selective opening settings. Copyright © 2013 John Wiley & Sons, Ltd.
Method for attacking a new public-key scheme based on cubic finite field extensions

BAI Guo-qiang,CAI Mian,XIAO Guo-zhen

DOI: https://doi.org/10.3969/j.issn.1001-2400.2000.06.015

2000-01-01

Abstract:Very recently, Guang Gong and Lein harn have proposed a new Diffie Hellman public key exchange scheme based on the 3 rd order linear feedback shift register sequences over GF(q). A method for attacking the scheme is investigated in this paper. For some special private keys, with the method we can easily obtain them from their public keys and the system open parameters.
Method Of Attacking A New Diffie-Hellman Like Public-Key Scheme

Guoqiang Bai,Rui Ma,Guang Xiao

IF: 1.019

2001-01-01

Chinese Journal of Electronics

Abstract:Guang Gong and Lein Harn proposed a new Diffie-Hellman public-key distribution scheme that is based on third-order linear feedback shift register sequences over GF(p) and its security is based on the difficulty of solving the discrete logarithm in GF(p(3)). However, a method for attacking the scheme is presented in this paper. Despite that the method could not break up it fully, it indicates that the security of the scheme is likely to be not being based on the difficulty of solving the discrete logarithm in GF(p(3)). With this method, we have also obtained the weak private keys of the scheme.
Public Key Encryption Resilient to Leakage and Tampering Attacks.

Shi-Feng Sun,Dawu Gu,Udaya Parampalli,Yu,Baodong Qin

DOI: https://doi.org/10.1016/j.jcss.2017.03.004

IF: 1.043

2017-01-01

Journal of Computer and System Sciences

Abstract:In this work, we investigate how to protect public key encryption from both key-leakage attacks and tampering attacks. First, we formalize the notions of chosen ciphertext (CCA) security against key-leakage and tampering attacks. To this goal, we then introduce the concept of key-homomorphic hash proof systems and present a generic construction of public key encryption based on this new primitive. Our construction, compared with previous works, realizes leakage-resilience and tampering-resilience simultaneously but completely independently, so it can tolerate a larger amount of bounded-memory leakage and be instantiated with more flexibility. Moreover, it allows for an unbounded number of affine-tampering queries, even after the challenge phase. With slight adaptations, our construction also achieves CCA security against subexponentially hard auxiliary-input leakage attacks and a polynomial of affine-tampering attacks. Thus, to the best of our knowledge, we get the first public key encryption scheme secure against both auxiliary-input leakage attacks and tampering attacks.
Key-Dependent Message Chosen-Ciphertext Security of the Cramer-Shoup Cryptosystem.

Baodong Qin,Shengli Liu,Zhengan Huang

DOI: https://doi.org/10.1007/978-3-642-39059-3_10

2013-01-01

Abstract:The Key-Dependent Message (KDM) security requires that an encryption scheme remains secure, even if an adversary has access to encryptions of messages that depend on the secret key. In a multi-user surrounding, a key-dependent message can be any polynomial-time function f(sk1, sk2,..., skn) in the secret keys of the users. The Key-Dependent Message Chosen-Ciphertext (KDM-CCA2) security can be similarly defined if the adversary is also allowed to query a decryption oracle. To date, KDM security has been obtained by a few constructions. But most of them are limited f(sk1, sk2,..., skn) to affine functions. As to KDM-CCA2 security, there are only two constructions available. However, neither of them has comparable key sizes and reasonable efficiency, compared to the traditional KDM-free but CCA2 secure public key encryption schemes. This article defines a new function ensemble, and shows how to obtain KDM-CCA2 security with respect to this new ensemble from the traditional Cramer-Shoup (CS) cryptosystem. To obtain KDM security, the CS system has to be tailored for encryption of key-dependent messages. We present an efficient instantiation of the Cramer-Shoup public-key encryption (CS-PKE) scheme over the subgroup of quadratic residues in ℤp*, where p is a safe prime, and prove the CS-PKE to be KDM-CCA2 secure with respect to the new function ensemble. We show that our proposed ensemble covers some affine functions, as well as other functions that are not contained in the affine ensemble. At the same time, the CS-PKE scheme with respect to our proposed function ensemble finds immediate application to anonymous credential systems. Compared to other KDM-CCA2 secure proposals, the CS scheme is the most practical one due to its short ciphertext size and computational efficiency. © 2013 Springer-Verlag.
A Secure Variant Of The Srp Encryption Scheme With Shorter Private Key

Bo Lv,Zhiniang Peng,Shaohua Tang

DOI: https://doi.org/10.1007/978-3-319-72359-4_9

2017-01-01

Abstract:The study of multivariate encryption algorithm is an important topic of multivariate public key cryptography research. However, quite few secure and practical multivariate encryption algorithms have been found up to now. The SRP encryption scheme is a multivariate encryption scheme that combines Square, Rainbow and the Plus method technique, which is of high efficiency and resistant to existing known attacks against multivariate schemes. In this paper, an improved SRP scheme with shorter private key and higher decryption efficiency is proposed. We introduce rotation relations into parts of the private key, which enables us to reduce the private key size by about 61%. And the decryption speed is 2.1 times faster than that of the original SRP. In terms of theory and experiment, we analyze the security of the improved SRP for several attacks against SRP. The results show that our modifications do not weaken the security of the original schemes.
A New Secure Anonymous Protocol for Distributed Computer Networks

Cui Hui,Cao Tianjie

DOI: https://doi.org/10.4304/jnw.6.9.1337-1343

2011-01-01

Journal of Networks

Abstract:In this paper, we analyzed Hsu-Chuang scheme and presented the vulnerability. We further secured their protocol by proposing a novel protocol that overcomes the above limitation while achieving the same security features. Besides, we made a demonstration of the correctness of our new scheme and analyzed the security properties. After compared Hsu-Chuang scheme and the new scheme, we also illustrated an example to illustrate the application of our improved protocol.
Public Key Encryption Without Random Oracle Made Truly Practical

Puwen Wei,Xiaoyun Wang,Yuliang Zheng

DOI: https://doi.org/10.1016/j.compeleceng.2012.02.001

2009-01-01

Abstract:In this paper, we report our success in identifying an efficient public key encryption scheme whose formal security proof does not require a random oracle. Specifically, we focus our attention on a universal hash based public key encryption scheme proposed by Zheng and Seberry at Crypto'92. Although Zheng and Seberry's encryption scheme is very simple and efficient, its reductionist security proof has not been provided. We show how to tweak the Zheng-Seberry scheme so that the resultant scheme not only preserves the efficiency of the original scheme but also admits provable security against adaptive chosen ciphertext attack without random oracle. For the security proof, our first attempt is based on a strong assumption called the oracle Diffie-Hellman^+ assumption. This is followed by a more challenging proof that employs a weaker assumption called the adaptive decisional Diffie-Hellman assumption, which is in alignment with adaptively secure assumptions advocated by Pandey, Pass and Vaikuntanathan.
Efficient Chosen Ciphertext Secure Public-Key Encryption under Factoring Assumption

Baodong Qin,Shengli Liu

DOI: https://doi.org/10.1002/sec.571

IF: 1.968

2012-01-01

Security and Communication Networks

Abstract:ABSTRACTIn EUROCRYPT 2009, Hofheinz and Kiltz introduced a new practical chosen ciphertext secure public‐key encryption scheme under the assumption that factoring is intractable. They also proposed a variant that features a slightly more efficient decryption but unfortunately leads to large public key, of size about O(k), where k is a security parameter. In this paper, we propose a novel method to balance the efficiency and the key size of those previous two schemes. Although the public key in our scheme only consists of one RSA modulus and three group elements, it is still more efficient at decrypting than Hofheinz and Kiltz's scheme. By remarking that under certain assumptions factoring the modulus is still hard over much smaller subgroups of signed quadratic residues (i.e., semismooth subgroup), we were able to construct a new scheme that performs extremely efficient decryption. In fact, to date, this is the most efficient scheme for decryption among all public‐key encryption schemes (mainly including Hofheinz and Kiltz's schemes and their follow‐up works) whose security against chosen ciphertext attacks is based on the intractability of factoring in the standard model. Copyright © 2012 John Wiley & Sons, Ltd.
A Modified Efficient Certificateless Signature Scheme without Bilinear Pairings

Liangliang Wang,Kefei Chen,Yu Long,Xianping Mao,Huige Wang

DOI: https://doi.org/10.1109/INCoS.2015.10

2015-01-01

Abstract:Certificateless public key cryptography was proposed to solve the key escrow problem in identity-based public key cryptography. Namely, a user's full private key must be comprised of a partial private key which is provided by the key generation center and a secret value which is chosen by the user. Thus the key generation center can no longer acquire each user's full private key by itself. In 2014, Yeh et al. proposed an efficient certificateless public key signature scheme without bilinear pairings. They also showed their scheme is secure against super adversary under the hardness of breaking discrete logarithm problem in the random model. In this paper, we modify Yeh et al.'s scheme to obtain a new scheme which is more practical than theirs. And our modified scheme can achieve the same security level as Yeh et al.'s scheme under the hardness of breaking discrete logarithm problem in the random model.
A Homomorphic Encryption Scheme with Adaptive Chosen Ciphertext Security but Without Random Oracle

Linming Gong,Shundong Li,Qing Mao,Daoshun Wang,Jiawei Dou

DOI: https://doi.org/10.1016/j.tcs.2015.10.001

IF: 1.002

2016-01-01

Theoretical Computer Science

Abstract:In this study, we consider the problem of constructing a homomorphic encryption scheme that is secure against adaptive chosen ciphertext attack (CCA2). This type of scheme has many applications in secure multi-party computation, electronic voting, and cloud storage and computation. We present an encryption scheme, based on the composite degree residuosity classes, which can block CCA2 while maintaining homomorphism. Our cryptosystem, which is based on standard modular arithmetic, is provable with indistinguishable security under CCA2. An additional contribution of this study is a new definition of preventing CCA2 (or blocking CCA2).
Cryptanalysis of a Multivariate Public Key Cryptosystem

LU Gang,NIE Xu-yun,QIN Zhi-guang,HOU Chuan-yong

DOI: https://doi.org/10.3969/j.issn.1001-0548.2018.02.013

2018-01-01

Abstract:In 2014, Yuan et al. proposed a new multivariate public key cryptosystem by combining "small field-big field" and "stepwise triangular" methods. The authors claimed that their scheme can be secure against rank attack, linearization equation attack and differential attack. Through analysis, we found that there are a lot of linearization equations satisfied by this scheme. We can transform it to an equivalent square encryption scheme by linearization equation method and then recover corresponding plaintext for any given cipheretext by differential attack. As to two recommended parameters, for given public key, the complexities of recovering plaintext are 233 and 235, respectively. The results above are further confirmed by computer experiments.
Practical certificateless short signature scheme

Miaomiao Tian,Liusheng Huang,Wei Yang

DOI: https://doi.org/10.1504/IJESDF.2014.064409

2014-01-01

International Journal of Electronic Security and Digital Forensics

Abstract:Certificateless cryptography is an attractive paradigm for public key cryptography since it does not require certificates in traditional public key cryptography and also solves the inherent key escrow problem in identity-based cryptography. Currently, certificateless short signature is receiving significant attention from the public key cryptography research community as it is particularly useful in low-bandwidth communication environments. However, most of the certificateless short signature schemes only support low-level security. Recently, Choi et al. presented a certificateless short signature scheme and claimed that it is provably secure against super adversaries in the random oracle model. Unfortunately, in this paper, we show that their scheme is insecure even against a strong adversary. We then propose a new certificateless short signature scheme and prove that it is secure against strong adversaries. Compared with other certificateless short signature schemes, our scheme is more computationally efficient.
New Certificateless Short Signature Scheme

Debiao He,Baojun Huang,Jianhua Chen

DOI: https://doi.org/10.1049/iet-ifs.2012.0176

2013-01-01

IET Information Security

Abstract:The certificateless public key cryptography has attracted wide attention since it could solve the certificate management problem in the traditional public key cryptography and the key escrow problem in the identity-based public key cryptography. Recently, several certificateless short signature schemes, which could satisfy the requirement of low-bandwidth communication environments, have been proposed. However, most of them are not secure against either the Type I adversary or the Type II adversary. In this study, the authors propose a new efficient certificateless short signature scheme. The analysis shows the authors' scheme has better performance than the related schemes and is secure against both of the super Type I and the super Type II adversaries.
Security Analysis of Public Key Encryption Scheme Based on Attack Classification

LU Xianhui,LAI Xuejia,HE Dake,LI Guomin

DOI: https://doi.org/10.3321/j.issn:1671-8836.2008.05.009

2008-01-01

Abstract:To check if a public key encryption scheme is secure against adaptive chosen ciphertext attacks,a security analysis method is proposed.According to the adversary's goal and information resource,adaptive chosen ciphertext attacks are classified into four categories and then the possibility of each category of attacks is analyzed.The proposed security analysis method distinguishes itself from the early security analysis in that it deals with the possibility of each of the attack categories rather than the search of a specific attack method.It is simpler and more intuitive than security proof.How to check the security of a scheme,which is adaptive chosen ciphertext secure in the random oracle model,in the real world is an open problem of the provable security research field.The proposed method provides a good solution to this problem.
A New Rabin Signature Scheme

Wei-dong QIU,Ke-fei CHEN,Ying-cai BAI

DOI: https://doi.org/10.13328/j.cnki.jos.2000.10.010

2000-01-01

Journal of Software

Abstract:A modified Rabin signature scheme is presented based on quadratic residue problem. The main advantage of the modified scheme is simpler to describe and more efficient to implement. There is no limitation for plain test space, especially only one modular multiplication is required for verification, and it is secure against chosen-ciphertext attack.
Security Analysis And Improvement Of Some Threshold Proxy Signature Schemes

Qs Xue,Zf Cao

2004-01-01

Abstract:We review Hsu et al's threshold proxy signature scheme with known signers, describe the Tsai et al's attack to Hsu et al's scheme and point out that their attack can't work. We also review Hsu et al's another scheme with unknown signers, analyze its security and point out that it can not resist the public key substitution attack. Based on Hsu et al's second scheme, an improved version which can resist the weakness is proposed.
Improving the C-Scheme by Allocating Unique Secret Parameters for Different Users

Jin Jiang,Zhihong Huang,Lei Li

DOI: https://doi.org/10.1109/cisw.2007.4425595

2007-01-01

Abstract:Different from conventional authentication approaches, an authentication scheme using n-dimensional construction method based on circle property(henceforth called C- Scheme) is proposed in paper[17]. Then the scheme is analyzed in improved respectively in paper[5] and paper[16]. However, this paper shows a weakness of the C-Scheme and proposes an improvement to the weakness by allocating unique secret parameters for different users in the C- Scheme. After analysis, the improved C-Scheme achieves a higher security level.
Security Analysis of the Pomykala-Barabasz Scheme.

Fagen Li,Yupu Hu

2008-01-01

Fundamenta Informaticae

Abstract:In 2006, Pomykala and Barabasz [Fundamenta Informaticae 69 (2006) 411-425] proposed an elliptic curve based threshold proxy signature scheme which requires shorter cryptographic keys. They claimed that their scheme satisfies the secrecy, the proxy protected, the unforgeability, the non-repudiation, and the known signers. However, in this paper, we show that their scheme cannot achieve the proxy protected, the unforgeability and the non-repudiation by demonstrating a conspiracy attack. In this attack, any t malicious proxy signers can collusively impersonate some other proxy signers to generate proxy signatures.
Cryptanalysis and Improvement of a Group Signature Scheme

LI Jun,CUI Guo-hua,LIU Zhi-yuan

DOI: https://doi.org/10.1166/asl.2012.2672

2007-01-01

Abstract:This paper analyzes the security of a group signature scheme based on Chinese Remainder Theorem proposed by Chen-ZW recently.The security of Chen-ZW's scheme relies on the assumption of integer factorization,but it is computable to factor the large integer in the scheme because all the group members share a same RSA modulus n.Therefore,the security assumption is unsuitable for the scheme,and the advantage of the scheme is virtually nonexistent.The paper also gives a modified scheme,which elaborately eliminates the defect of the original scheme and improves the efficiency of the protocol.

Variation of Cramer-Shoup Public Key Scheme

Public- Key Encryption Scheme with Selective Opening Chosen- Ciphertext Security Based on the Decisional Diffie- Hellman Assumption

Method for attacking a new public-key scheme based on cubic finite field extensions

Method Of Attacking A New Diffie-Hellman Like Public-Key Scheme

Public Key Encryption Resilient to Leakage and Tampering Attacks.

Key-Dependent Message Chosen-Ciphertext Security of the Cramer-Shoup Cryptosystem.

A Secure Variant Of The Srp Encryption Scheme With Shorter Private Key

A New Secure Anonymous Protocol for Distributed Computer Networks

Public Key Encryption Without Random Oracle Made Truly Practical

Efficient Chosen Ciphertext Secure Public-Key Encryption under Factoring Assumption

A Modified Efficient Certificateless Signature Scheme without Bilinear Pairings

A Homomorphic Encryption Scheme with Adaptive Chosen Ciphertext Security but Without Random Oracle

Cryptanalysis of a Multivariate Public Key Cryptosystem

Practical certificateless short signature scheme

New Certificateless Short Signature Scheme

Security Analysis of Public Key Encryption Scheme Based on Attack Classification

A New Rabin Signature Scheme

Security Analysis And Improvement Of Some Threshold Proxy Signature Schemes

Improving the C-Scheme by Allocating Unique Secret Parameters for Different Users

Security Analysis of the Pomykala-Barabasz Scheme.

Cryptanalysis and Improvement of a Group Signature Scheme