Abstract:As a multi-receiver variant of public key encryption with keyword search (PEKS), broadcast encryption with keyword search (BEKS) has been proposed (Attrapadung et al. at ASIACRYPT 2006/Chatterjee-Mukherjee at INDOCRYPT 2018). Unlike broadcast encryption, no receiver anonymity is considered because the test algorithm takes a set of receivers as input and thus a set of receivers needs to be contained in a ciphertext. In this paper, we propose a generic construction of BEKS from anonymous andweakly robust 3-level hierarchical identity-based encryption (HIBE). The proposed generic construction provides outsider anonymity, where an adversary is allowed to obtain secret keys of outsiders who do not belong to the challenge sets, and provides sublinear-size ciphertext in terms of the number of receivers. Moreover, the proposed construction considers security against chosen-ciphertext attack (CCA) where an adversary is allowed to access a test oracle in the searchable encryption context. The proposed generic construction can be seen as an extension to the Fazio-Perera generic construction of anonymous broadcast encryption (PKC 2012) from anonymous and weakly robust identity-based encryption (IBE) and the Boneh et al. generic construction of PEKS (EUROCRYPT 2004) from anonymous IBE.We run the Fazio-Perera construction employs on the first-level identity and run the Boneh et al. generic construction on the second-level identity, i.e., a keyword is regarded as a second-level identity. The third-level identity is used for providing CCA security by employing one-time signatures. We also introduce weak robustness in the HIBE setting, and demonstrate that the Abdalla et al. generic transformation (TCC 2010/JoC 2018) for providing weak robustness to IBE works for HIBE with an appropriate parameter setting. We also explicitly introduce attractive concrete instantiations of the proposed generic construction from pairings and lattices, respectively.

Conditions for Anonymity in Some Generic Public-Key Encryption Constructions

Some General Results on Anonymity in Hybrid Encryption Schemes

Fully Secure Anonymous Identity-Based Encryption under Simple Assumptions

Generic Constructions of Integrated PKE and PEKS

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Anonymous Identity-Based Encryption Scheme in Groups of Prime Order

Anonymous Identity-Based Encryption Scheme Without Random Oracles

Outsider-Anonymous Broadcast Encryption with Keyword Search: Generic Construction, CCA Security, and with Sublinear Ciphertexts

Generic Methods To Achieve Tighter Security Reductions For A Category Of Ibe Schemes

Identity-Based Encryption for Fair Anonymity Applications - Defining, Implementing, and Applying Rerandomizable RCCA-Secure IBE.

Anonymous Public Key Encryption under Corruptions.

A Variant Of Boyen-Waters Anonymous Ibe Scheme

Anonymous Identity-Based Encryption with Bounded Leakage Resilience

Anonymous Signature Schemes

Anonymous and Adaptively Secure Revocable IBE with Constant Size Public Parameters

2 The Definition and Security Models of Signcryption with Key Privacy

Privacy-Aware Attribute-Based Encryption with User Accountability

An Efficient One-Way Authenticated Key Exchange Protocol for Anonymity Networks.

An Efficient Signcryption Scheme With Key Privacy

General And Efficient Certificateless Public Key Encryption Constructions

An Efficient Identity-Based Anonymous Signcryption Scheme