Abstract:We study simulation-based, selective opening security against chosen-ciphertext attacks (SIM-SO-CCA security) for public key encryption (PKE). In a selective opening, chosen-ciphertext attack (SO-CCA), an adversary has access to a decryption oracle, sees a vector of ciphertexts, adaptively chooses to open some of them, and obtains the corresponding plaintexts and random coins used in the creation of the ciphertexts. The SIM-SO-CCA notion captures the security of unopened ciphertexts with respect to probabilistic polynomial-time (ppt) SO-CCA adversaries in a semantic way: what a ppt SO-CCA adversary can compute can also be simulated by a ppt simulator with access only to the opened messages. Building on techniques used to achieve weak deniable encryption and non-committing encryption, Fehr et al. (Eurocrypt 2010) presented an approach to constructing SIM-SO-CCA secure PKE from extended hash proof systems (EHPSs), collision-resistant hash functions and an information-theoretic primitive called Cross Authentication Codes (XACs). We generalize their approach by introducing a special type of Key Encapsulation Mechanism (KEM) and using it to build SIM-SO- CCA secure PKE. We investigate what properties are needed from the KEM to achieve SIM-SO-CCA security. We also give three instantiations of our construction. The first uses hash proof systems, the second relies on the n-Linear assumption, and the third uses indistinguishability obfuscation (iO) in combination with extracting, puncturable Pseudo-Random Functions in a similar way to Sahai and Waters (STOC 2014). Our results establish the existence of SIM-SO-CCA secure PKE assuming only the existence of one-way functions and iO. This result further highlights the simplicity and power of iO in constructing different cryptographic primitives.

Public-Key Encryption with Selective Opening Security from General Assumptions.

Public-Key Encryption with Tight Simulation-Based Selective-Opening Security.

Tightly Sim-So-Cca Secure Public Key Encryption From Standard Assumptions

Public- Key Encryption Scheme with Selective Opening Chosen- Ciphertext Security Based on the Decisional Diffie- Hellman Assumption

Simulation-Based Selective Opening Cca Security For Pke From Key Encapsulation Mechanisms

Selective opening chosen ciphertext security directly from the DDH assumption

Lattice-based PKEs/KEMs

Predicate encryption with selective-opening security for receivers: formal definition, generic construction, and concrete instantiations for several primitives

Public Key Cryptosystems Secure Against Memory Leakage Attacks

Stronger Security Model for Public-Key Encryption with Equality Test

Cryptanalysis of Two Searchable Public Key Encryption Schemes with a Designated Tester ⋆

Identity-Based Encryption Secure Against Selective Opening Chosen-Ciphertext Attack.

Tightly Secure Encryption Schemes Against Related-Key Attacks

Secure Searchable Public Key Encryption Against Insider Keyword Guessing Attacks from Indistinguishability Obfuscation

SR-PEKS: Subversion-Resistant Public Key Encryption With Keyword Search

Fixing the Sender-Equivocable Encryption Scheme in Eurocrypt 2010

RKA-Secure Public Key Encryptions Against Efficiently Invertible Functions.

Passive Attacks Against Searchable Encryption.

Strong Leakage and Tamper-Resilient PKE from Refined Hash Proof System.

More Efficient Public-Key Cryptography with Leakage and Tamper Resilience.

On the Security of Public Key Protocols