Abstract:Cloud-based anonymous messaging systems have been widely utilized in covert conversations to enable people to anonymously exchange encrypted data in public using cryptographic techniques. Recently, Ateniese et al . proposed the identity-based matchmaking encryption (IB-ME) which provides confidentiality, anonymity and authenticity in a logical single step for such systems. However, there are two crucial and practical issues in IB-ME. On the one hand, the existing IB-MEs only achieve indistinguishability under adaptive chosen identity and plaintext attacks (IND-ID-CPA). How to structure the IB-ME with indistinguishability under adaptive chosen identity and ciphertext attacks (IND-ID-CCA) is still an open problem. On the other hand, the computational cost of the receiver is considerable when using IB-ME since the ciphertext leaks no information about its sender's and specified receiver's identities. Thus, the receiver has to attempt to match "all" ciphertexts one by one with its own decryption key and "all" potential senders' identities. To reduce such a cost of the receiver in IB-ME, it is desired for the receiver to delegate the decryption ability with respect to the potential senders to some proxies. With the proxy keys, these proxies can match the ciphertexts parallelly. Nonetheless, an obvious challenge is how to delegate such ability to a proxy without losing anonymity and authenticity to protect the privacy of both the sender and the receiver. In this paper, we propose a novel CCA-secure solution, called identity-based proxy matchmaking encryption (IB-PME) for cloud-based anonymous messaging systems, to address the foregoing issues. The security analysis and the performance evaluation demonstrate that our proposed IB-PME is highly practical.

Identity-based Proxy Re-Encryption Version 2: Making Mobile Access Easy in Cloud.

Fully secure unidirectional identity-based proxy re-encryption

Conditional Identity-Based Broadcast Proxy Re-Encryption and Its Application to Cloud Email.

Mobile Access and Flexible Search over Encrypted Cloud Data in Heterogeneous Systems

Autonomous Path Identity-Based Broadcast Proxy Re-Encryption for Data Sharing in Clouds

An Identity-Based Conditional Proxy Re-Encryption in Cloud Computing Environments

Security Analysis of Two Identity Based Proxy Re-encryption Schemes in Multi-user Networks.

Identity Based Proxy Re-encryption Based on BB2 and SK IBE with the Help of PKG

New Construction of Identity-based Proxy Re-encryption.

Secure and Efficient Proxy Re-Encryption Scheme Based on Key-Homomorphic Constrained PRFs in Cloud Computing

Flexible, Efficient, and Secure Access Delegation in Cloud Computing

Hierarchical Identity-Based Proxy Re-Encryption Without Random Oracles.

A Key-insulated Proxy Re-encryption Scheme for Data Sharing in a Cloud Environment.

Identity Based Proxy Re-encryption from BB1 IBE

Strongly Secure and Cost-Effective Certificateless Proxy Re-encryption Scheme for Data Sharing in Cloud Computing

Proxy Re-Encryption Schemes with Proxy Having Its Own Public/Private Keys

New Constructions for Identity-Based Unidirectional Proxy Re-Encryption

Multi-use unidirectional identity-based proxy re-encryption from hierarchical identity-based encryption

HyPRE: Hybrid Proxy Re-Encryption for Secure Multimedia Data Sharing on Mobile Devices

Backdoor-resistant identity-based proxy re-encryption for cloud-assisted wireless body area networks

Identity-based proxy matchmaking encryption for cloud-based anonymous messaging systems