Abstract:Outsourcing data to cloud services is a good solution for users with limited computing resources. Privacy and confidentiality of data is jeopardized when data is transferred and shared in the cloud. The development of searchable cryptography offers the possibility to solve these problems. Symmetric searchable encryption (SSE) is popular among researchers because it is efficient and secure. SSE often requires the data sender and data receiver to use the same key to generate key ciphertext and trapdoor, which will obviously cause the problem of key management. Searchable encryption based on public key can simplify the key management problem. A public key encryption scheme with keyword search (PEKS) allows multiple senders to encrypt keywords under the receiver's public key. It is vulnerable to keyword guessing attacks (KGA) due to the small size of the keywords. The proposal of public key authenticated encryption with keyword search (PAEKS) is mainly to resist inside keyword guessing attacks. The previous security models do not involve the indistinguishability of the same keywords ( w 0 × × = w 1 ), which brings the user's search pattern easy to leak. The essential reason is that the trapdoor generation algorithm is deterministic. At the same time, most of the existing schemes use bilinear pair design, which greatly reduces the efficiency of the scheme. To address these problems, the paper introduces an improved PAEKS model. We design a lightweight public key authentication encryption scheme based on the Diffie-Hellman protocol. Then, we prove the ciphertext indistinguishability security and trapdoor indistinguishability security of the scheme in the improved security model. Finally, the paper demonstrates its comparable security and computational efficiency by comparing it with previous PAEKS schemes. Meanwhile, we conduct an experimental evaluation based on the cryptographic library. Experimental results show that the computational overhead of our scheme compared with the ciphertext generation algorithm, trapdoor generation algorithm and test algorithm of other schemes Our scheme reduces 274, 158 and 60 times, respectively.

ABAEKS: Attribute-Based Authenticated Encryption With Keyword Search Over Outsourced Encrypted Data

Secure and Efficient Attribute-Based Encryption with Keyword Search.

A Secure Data-Sharing Model Resisting Keyword Guessing Attacks in Edge–Cloud Collaboration Scenarios

ABKS-SKGA: Attribute-based keyword search secure against keyword guessing attack

A Lightweight Authenticated Searchable Encryption without Bilinear Pairing for Cloud Computing

Designated-tester Identity-Based Authenticated Encryption with Keyword Search with applications in cloud systems

Verifiable Attribute-Based Multi-Keyword Search Scheme with Sensitive Information Hiding for Cloud-Assisted E-Healthcare Sharing Systems

Multi-Keywords Searchable Attribute-Based Encryption With Verification and Attribute Revocation Over Cloud Data

On the Security of Privacy-Preserving Attribute-Based Keyword Search in Shared Multi-owner Setting

On the Security of Secure Keyword Search and Data Sharing Mechanism for Cloud Computing

Certificateless Public Key Authenticated Encryption with Keyword Search Achieving Stronger Security.

A More Efficient Public-Key Authenticated Encryption Scheme with Keyword Search

Attribute Based Conjunctive Keywords Search with Verifiability and Fair Payment Using Blockchain

Fuzzy Keyword Search over Encrypted Cloud Data with Dynamic Fine-grained Access Control.

KASE-AKA: Key-aggregate keyword searchable encryption against keyword guessing attack and authorization abuse

Defending Against Key Exposure in Attribute-Based Encryption

Attribute-Based Keyword Search Efficiency Enhancement Via an Online/Offline Approach

Attribute-Based Searchable Encryption in Edge Computing for Lightweight Devices

Enabling Anonymous Authorized Auditing over Keyword-Based Searchable Ciphertexts in Cloud Storage Systems

Keyword Search with Access Control over Encrypted Data in Cloud Computing

Attribute-Based Equality Test Over Encrypted Data Without Random Oracles