Abstract:Anonymity of public key encryption (PKE) requires that, in a multi-user scenario, the PKE ciphertexts do not leak information about which public keys are used to generate them. Corruptions are common threats in the multi-user scenario but anonymity of PKE under corruptions is less studied in the literature. In TCC 2020, Benhamouda et al. first provide a formal characterization for anonymity of PKE under a specific type of corruption. However, no known PKE scheme is proved to meet their characterization. To the best of our knowledge, all the PKE application scenarios which require anonymity also require confidentiality. However, in the work by Benhamouda et al., different types of corruptions for anonymity and confidentiality are considered, which can cause security pitfalls. What's worse, we are not aware of any PKE scheme which can provide both anonymity and confidentiality under the same types of corruptions. In this work, we introduce a new security notion for PKE called ANON-RSOk&C security, capturing anonymity under corruptions. We also introduce SIM-RSOk&C security which captures confidentiality under the same types of corruptions. We provide a generic framework of constructing PKE scheme which can achieve the above two security goals simultaneously based on a new primitive called key and message non-committing encryption (KM-NCE). Then we give a general construction of KM-NCE utilizing a variant of hash proof system (HPS) called Key-Openable HPS. We also provide Key-Openable HPS instantiations based on the matrix decisional Diffie-Hellman assumption. Therefore, we can obtain various concrete PKE instantiations achieving the two security goals in the standard model with compact ciphertexts. Furthermore, for some PKE instantiation, its security reduction is tight.

Some General Results on Anonymity in Hybrid Encryption Schemes

Semantic Security: Privacy Definitions Revisited.

Conditions for Anonymity in Some Generic Public-Key Encryption Constructions

An Enhanced K-Anonymity Model Against Homogeneity Attack.

2 The Definition and Security Models of Signcryption with Key Privacy

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

An Efficient Signcryption Scheme With Key Privacy

k-Anonymously Private Search over Encrypted Data

Anonymous Public Key Encryption under Corruptions.

Analysis and improvement of a signcryption scheme with key privacy

Anonymous Signature Schemes

Feature Homomorphism -- A Cryptographic Scheme For Data Verification Under Ciphertext-Only Conditions

Weak Probabilistic Anonymity

Fully Secure Anonymous Identity-Based Encryption under Simple Assumptions

Leakage-Resilient Anonymous Heterogeneous Multi-Receiver Hybrid Encryption in Heterogeneous Public-Key System Settings

Generalized (Identity-Based) Hash Proof System and Its Applications.

On Access-Unrestricted Data Anonymity and Privacy Inference Disclosure Control.

A Personalized (a,k)-Anonymity Model

Privacy-Preserving Hierarchical Anonymization Framework over Encrypted Data

Anonymous Identity-Based Encryption with Bounded Leakage Resilience