Abstract:Proxy re-encryption (PRE) allows a proxy to transform a ciphertext intended for Alice (delegator) to another ciphertext intended for Bob (delegatee) without revealing the underlying message. Recently, a new variant of PRE, namely fine-grained PRE (FPRE), was proposed in [Zhou et al., Asiacrypt 2023]. Generally, FPRE is designed for a function family F: each re-encryption key rk(A -> B)(f) is associated with a function f is an element of F, and with rk(A -> B)(f), a proxy can transform Alice's ciphertext encrypting m to Bob's ciphertext encrypting f(m). However, their scheme only supports single-hop re-encryption and achieves only CPA security. In this paper, we formalize multi-hop FPRE (mFPRE) that supports multi-hop re-encryptions in the fine-grained setting, and propose two mFPRE schemes achieving CPA security and stronger HRA security (security against honest re-encryption attacks), respectively. - For multi-hop FPRE, we formally define its syntax and formalize a set of security notions including CPA security, HRA security, undirectionality and ciphertext unlinkablity. HRA security is stronger and more reasonable than CPA security, and ciphertext unlinkablity blurs the proxy relations among a chain of multi-hop re-encryptions, hence providing better privacy. We establish the relations between these security notions. - Our mFPRE schemes support fine-grained re-encryptions for bounded linear functions and have security based on the learning-with-errors (LWE) assumption in the standard model. In particular, one of our schemes is HRA secure and enjoys all the aforementioned desirable securities. To achieve CPA security and HRA security for mFPRE, we extend the framework of [Jafargholi et al., Crypto 2017] and the technique of the [Fuchsbauer et al., PKC 2019].

On the Relation Between Identity-Based Proxy Re-Encryption and Mediated Identity-Based Encryption.

Fully secure unidirectional identity-based proxy re-encryption

New Constructions for Identity-Based Unidirectional Proxy Re-Encryption

IB-VPRE: adaptively secure identity-based proxy re-encryption scheme from LWE with re-encryption verifiability

Cryptoanalysis of ID-based Proxy Re-Signature Scheme with Pairing-Free

New Construction of Identity-based Proxy Re-encryption.

Identity-based proxy matchmaking encryption for cloud-based anonymous messaging systems

A CCA-Secure identity-based conditional proxy re-encryption without random oracles

Hierarchical Identity-Based Proxy Re-Encryption Without Random Oracles.

Burn after Reading: Adaptively Secure Puncturable Identity-Based Proxy Re-Encryption Scheme for Securing Group Message

Cryptographic Reverse Firewalls for Identity-Based Encryption.

Chosen-ciphertext Secure Bidirectional Proxy Re-Encryption Schemes Without Pairings

Proxy Re-encryption with Keyword Search from Anonymous Conditional Proxy Re-encryption

Mobile Access and Flexible Search over Encrypted Cloud Data in Heterogeneous Systems

A New Framework for the Design and Analysis of Identity-Based Identification Schemes

Multi-Hop Fine-Grained Proxy Re-Encryption.

An Identity-Based Conditional Proxy Re-Encryption in Cloud Computing Environments

A New Encrypted Data Switching Protocol: Bridging IBE and ABE Without Loss of Data Confidentiality.

New Identity-Based Proxy Re-Signcryption

Revocable Identity-Based Encryption and Server-Aided Revocable IBE from the Computational Diffie-Hellman Assumption.

Identity-Based Encryption for Fair Anonymity Applications - Defining, Implementing, and Applying Rerandomizable RCCA-Secure IBE.