Abstract:Password-based authentication is one of the most prevailing access control mechanism. Typical password-authenticated key exchange (PAKE) protocols are single-server settings and are therefore vulnerable to server compromise attack. To defend against such attack, multi-server PAKE schemes have been advanced, but most of which are built on non-quantum-secure hardness assumptions. Lattice-based cryptosystems are regarded as the most promising one for post-quantum eara by NIST, while the known multi-server password-based authentication solution over lattices achieves merely key transport and is public key infrastructure (PKI)-based, resulting in low efficiency and poor deployability. In this work, we resort to distributed smooth projective hash function (SPHF) to bridge the gap between multi-server PAKE protocol and quantum-security. We first design an exact SPHF and derive the first distributed SPHF over lattices by leveraging the additive homomorphic property of the strong learning with errors (LWE) problem. In particular, the relevant parameters of the public key encryption (PKE) scheme it predicates on are identified, thus eliminating the influence of incomplete lattice homomorphism on the correctness of our SPHFs. Pertinent lattice-based multi-server PAKE protocols are further proposed on both transparent and non-transparent transmission modes by integrating our distributed SPHF into the multi-server framework of Raimondo and Gennaro (EUROCRYPT'03). Our PAKE constructions are able to resist both quantum and sever compromise attacks as well as avoid the expensive cryptographic primitives, including non-interactive zero knowledge (NIZK) proofs, signature/verification, secret sharing and fully homomorphic encryption. Experimental results demonstrate that our SPHFs and PAKE protocols offer better efficiency.

CCA2-secure Lattice-based Public Key Encryption with Equality Test in Standard Model

Lattice-based public key encryption with equality test supporting flexible authorization in standard model

Lattice-based PKEs/KEMs

A Lattice-Based Public Key Encryption Scheme with Delegated Equality Test

Designated Cloud Server Public Key Encryption with Keyword Search from Lattice in the Standard Model

URDP: General Framework for Direct CCA2 Security from any Lattice-Based PKE Scheme

A New Public Key Encryption with Equality Test.

Attribute-Based Equality Test Over Encrypted Data Without Random Oracles

Stronger Security Model for Public-Key Encryption with Equality Test

Public Key Encryption With Equality Test Supporting Flexible Designated Authorization in Cloud Storage

Lattice-based Searchable Public-Key Encryption Scheme for Secure Cloud Storage

Leakage-Flexible CCA-secure Public-Key Encryption: Simple Construction and Free of Pairing.

Ciphertext-Policy Attribute-Based Encryption with Delegated Equality Test in Cloud Computing.

A Fully Secure Lattice-Based Signcryption with Designated Equality Test in Standard Model

Efficient CCA-Secure PKE from identity-based techniques

Efficient Chosen-Ciphertext Secure Public-Key Encryption Scheme with High Leakage-Resilience.

Public Key Encryption with Equality Test for Heterogeneous Systems in Cloud Computing.

Quantum-safe multi-server password-based authenticated key exchange protocol

Traceable Scheme of Public Key Encryption with Equality Test

Structure-preserving Public-Key Encryption with Leakage-Resilient CCA Security.

Tight Leakage-Resilient CCA-Security from Quasi-Adaptive Hash Proof System