Abstract:In public key encryption with keyword search (PEKS) framework, see Figure 1(a), the cloud server stores index $l_{w}$ and verifies the equivalence whether w=w' or not on receiving a keyword search request through a trapdoor $T_{w'}$. Aside from the traditional secrecy concerns over index, a new threat called inner keyword guessing attack which addressed the secrecy of trapdoors against off-line brute force attacks, was indicated by Chen et al. First, the index $I_{w}$ is publicly computable; second, the domain of keywords is not big enough to resist brute force attacks; and third, the cloud server can verify the equivalence between keywords of index and trapdoors by itself. As a curious server, on input a trapdoor $T_{w^{'}}$, the server can keep computing index with different keywords $w$ and tests the equivalence by itself until finding the keyword $w^{\prime}$ hidden in the trapdoors. That is, the secrecy of trapdoors can be easily broken. Furthermore, the ‘hacked trapdoor’ can be utilized to test all the index in the database, which indirectly impacts the secrecy of index. Chen et al. propose a dual-server PEKS (DS-PEKS) syntax to deal with this issue. There are a front server and a back server in their architecture (see Figure 1(b)) and the keyword search test is done by the co-operation of two servers. Assume that these two servers do not collude, the DS-PEKS scheme will be secure against offline inner keyword guessing attacks (although that the on-line inner keyword guessing attacks still work). However, several flaws occur in Chen et al.'s works so that the secrecy of index and trapdoors are not well-protected even against outside adversaries. In this work, we propose a new DS-PEKS construction based on the Cramer Shoup encryption, whose index and trapdoors are provably indistinguishable against chosen keyword attacks based on the IND-CCA2 security of the Cramer Shoup encryption without random oracle model.

Identity-based encryption with keyword search from lattice assumption

Lattice-based Searchable Public-Key Encryption Scheme for Secure Cloud Storage

A new construction of public key authenticated encryption with keyword search based on LWE

Public Key Encryption with Conjunctive Keyword Search Secure Against Keyword Guessing Attack from Lattices

Designated Cloud Server Public Key Encryption with Keyword Search from Lattice in the Standard Model

FS-IBEKS: Forward Secure Identity-Based Encryption with Keyword Search from Lattice

Certificateless Public Key Authenticated Encryption with Keyword Search Achieving Stronger Security.

Identity-Based Encryption with Disjunctive, Conjunctive and Range Keyword Search from Lattices

A lattice‐based searchable encryption scheme with multi‐user authorization for the certificateless cloud computing environment

Secure Searchable Public Key Encryption Against Insider Keyword Guessing Attacks from Indistinguishability Obfuscation

A Novel Model for Lattice-Based Authorized Searchable Encryption with Special Keyword

Public key encryption with temporary and fuzzy keyword search

Provable secure dual-server public key encryption with keyword search

Public-key Authenticated Encryption with Keyword Search Achieving Both Multi-Ciphertext and Multi-Trapdoor Indistinguishability.

An Efficient Public-Key Searchable Encryption Scheme Secure Against Inside Keyword Guessing Attacks

Identity-Based Group Encryption With Keyword Search Against Keyword Guessing Attack

Public Key Authenticated Encryption with Keyword Search Improved: Strong Security Model and Multi-keyword Construction

Cryptanalysis of Two Searchable Public Key Encryption Schemes with a Designated Tester ⋆

A sustainable certificateless authenticated searchable encryption with multi-trapdoor indistinguishability

A Searchable Encryption Scheme Based on Lattice for Log Systems in Blockchain

Secure Searchable Public-Key Encryption for Cloud Storage.