Abstract:We study simulation-based, selective opening security against chosen-ciphertext attacks (SIM-SO-CCA security) for public key encryption (PKE). In a selective opening, chosen-ciphertext attack (SO-CCA), an adversary has access to a decryption oracle, sees a vector of ciphertexts, adaptively chooses to open some of them, and obtains the corresponding plaintexts and random coins used in the creation of the ciphertexts. The SIM-SO-CCA notion captures the security of unopened ciphertexts with respect to probabilistic polynomial-time (ppt) SO-CCA adversaries in a semantic way: what a ppt SO-CCA adversary can compute can also be simulated by a ppt simulator with access only to the opened messages. Building on techniques used to achieve weak deniable encryption and non-committing encryption, Fehr et al. (Eurocrypt 2010) presented an approach to constructing SIM-SO-CCA secure PKE from extended hash proof systems (EHPSs), collision-resistant hash functions and an information-theoretic primitive called Cross Authentication Codes (XACs). We generalize their approach by introducing a special type of Key Encapsulation Mechanism (KEM) and using it to build SIM-SO- CCA secure PKE. We investigate what properties are needed from the KEM to achieve SIM-SO-CCA security. We also give three instantiations of our construction. The first uses hash proof systems, the second relies on the n-Linear assumption, and the third uses indistinguishability obfuscation (iO) in combination with extracting, puncturable Pseudo-Random Functions in a similar way to Sahai and Waters (STOC 2014). Our results establish the existence of SIM-SO-CCA secure PKE assuming only the existence of one-way functions and iO. This result further highlights the simplicity and power of iO in constructing different cryptographic primitives.

Adaptively Secure Puncturable Pseudorandom Functions Via Puncturable Identity-Based KEMs

Lattice-based PKEs/KEMs

Incremental Symmetric Puncturable Encryption with Support for Unbounded Number of Punctures

Puncturable Encryption: A Generic Construction from Delegatable Fully Key-Homomorphic Encryption

Strong Leakage and Tamper-Resilient PKE from Refined Hash Proof System.

Privacy‐Enhanced Data Sharing Systems from Hierarchical ID‐Based Puncturable Functional Encryption with Inner Product Predicates

Constructions of Beyond-Birthday Secure PRFs from Random Permutations, Revisited.

Lattice Puncturable Attribute Based Proxy Re-encryption Scheme and Its Application in Information Centric Network

Public Key Cryptosystems Secure Against Memory Leakage Attacks

Generic Constructions of Integrated PKE and PEKS

Efficient CCA-Secure PKE from identity-based techniques

Continuous Non-Malleable Key Derivation And Its Application To Related-Key Security

Beyond-birthday Secure Domain-Preserving PRFs from a Single Permutation.

Burn after Reading: Adaptively Secure Puncturable Identity-Based Proxy Re-Encryption Scheme for Securing Group Message

RKA-Secure Public Key Encryptions Against Efficiently Invertible Functions.

CCA-Secure IB-KEM from Identity-Based Extractable Hash Proof System

Post-Quantum Pseudorandom Functions from Mersenne Primes.

Flexible and Compact MLWE-Based KEM

Simulation-Based Selective Opening Cca Security For Pke From Key Encapsulation Mechanisms

Tightly Sim-So-Cca Secure Public Key Encryption From Standard Assumptions

Key Encapsulation Mechanism with Tight Enhanced Security in the Multi-user Setting: Impossibility Result and Optimal Tightness