Revocable attribute-based encryption from standard lattices

Fucai Luo,Saif Al-Kuwari,Haiyan Wang,Fuqun Wang,Kefei Chen

DOI: https://doi.org/10.1016/j.csi.2022.103698

2023-03-01

Abstract:Attribute-based encryption (ABE) is an attractive extension of public key encryption, which provides fine-grained and role-based access to encrypted data. In its key-policy flavor, the secret key is associated with an access policy and the ciphertext is marked with a set of attributes. In many practical applications, and in order to address scenarios where users become malicious or their secret keys are compromised, it is necessary to design an efficient revocation mechanism for ABE. However, prior works on revocable key-policy ABE schemes are based on classical number-theoretic assumptions, which are vulnerable to quantum attacks. In this work, we propose the first revocable key-policy ABE scheme that offers an efficient revocation mechanism while maintaining fine-grained access control to encrypted data. Our scheme is based on the learning with errors (LWE) problem, which is widely believed to be quantum-resistant. Our scheme supports polynomial-depth policy function and has short secret keys, where the size of the keys depends only on the depth of the supported policy function. Furthermore, we prove that our scheme satisfies selective revocation list security in the standard model under the LWE assumption.

computer science, software engineering, hardware & architecture

What problem does this paper attempt to address?

The paper attempts to address the problem of implementing an efficient user revocation mechanism in Attribute-Based Encryption (ABE) systems, particularly for Key-Policy ABE (KP-ABE). In many practical applications, when users become malicious or their keys are compromised, it is necessary to revoke these users' decryption capabilities to protect the system's security and the privacy of other users. However, most existing revocable KP-ABE schemes are based on classical number theory assumptions, which are not resistant to quantum attacks.

To solve this problem, the paper proposes a revocable KP-ABE scheme based on the Learning With Errors (LWE) problem. The LWE problem is considered resistant to quantum attacks, so this scheme can provide an efficient user revocation mechanism while maintaining fine-grained access control. Additionally, the scheme supports polynomial-depth policy functions, and the private keys are relatively short, with their size depending only on the depth of the supported policy functions. The paper also proves that the scheme satisfies selective revocation list security in the standard model.