A Generic Construction of CCA-Secure Attribute-Based Encryption with Equality Test

Asano, Kyoichi; Emura, Keita; Takayasu, Atsushi; Watanabe, Yohei

doi:10.1007/978-3-031-20917-8_1

Cited by 4 publications

(3 citation statements)

References 32 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…1.2 Differences from the Proceedings Version [23] In the proceedings version [23], we only used Yamada's IBE scheme [17] to instantiate the IBEET scheme from the proposed construction. However, there is a more efficient IBE † † In this paper, we do not follow Lee et al's argument [2] in a security proof but follow Asano et al's one [22] which is an attribute-based extension of Lee et al's work with a refined proof. Gaussian Distributions.…”

Section: Our Contributionmentioning

confidence: 97%

See 1 more Smart Citation

More Efficient Adaptively Secure Lattice-Based IBE with Equality Test in the Standard Model

ASANO,

EMURA,

TAKAYASU

2024

IEICE Trans. Fundamentals

Self Cite

View full text Add to dashboard Cite

Identity-based encryption with equality test (IBEET) is a variant of identity-based encryption (IBE), in which any user with trapdoors can check whether two ciphertexts are encryption of the same plaintext. Although several lattice-based IBEET schemes have been proposed, they have drawbacks in either security or efficiency. Specifically, most IBEET schemes only satisfy selective security, while public keys of adaptively secure schemes in the standard model consist of matrices whose numbers are linear in the security parameter. In other words, known lattice-based IBEET schemes perform poorly compared to the state-of-the-art lattice-based IBE schemes (without equality test). In this paper, we propose a semi-generic construction of CCA-secure lattice-based IBEET from a certain class of lattice-based IBE schemes. As a result, we obtain the first lattice-based IBEET schemes with adaptive security and CCA security in the standard model without sacrificing efficiency. This is because, our semi-generic construction can use several state-of-the-art lattice-based IBE schemes as underlying schemes, e.g. Yamada's IBE scheme (CRYPTO'17).

show abstract

Section: Our Contributionmentioning

confidence: 97%

“…† To the best of our knowledge, there are no IBEET schemes that satisfy the condition (3) unconditionally. Thus, PPT adversaries A appears in the formal condition of (3) by following [22]. The adversary A wins in the above game if M = M * and the advantage is defined to…”

Section: Security Let Ct *mentioning

confidence: 99%

More Efficient Adaptively Secure Lattice-Based IBE with Equality Test in the Standard Model

ASANO,

EMURA,

TAKAYASU

2024

IEICE Trans. Fundamentals

Self Cite

View full text Add to dashboard Cite

show abstract

“…The notion of equality test (ET) is not limited to PKE and IBE; it has also been studied in the context of certificateless PKE [23], group PKE [24], signcryption [25], attributebased encryption [26][27][28][29][30], and so on. Similarly, there are several more flexible notions of ET such as all-or-nothing ET [9], fine-grained ET [31,32], delegated ET [33], and so on.…”

Section: Related Workmentioning

confidence: 99%

A Generic Construction of CCA-Secure Identity-Based Encryption with Equality Test against Insider Attacks

Emura

Takayasu

2023

IEICE Trans. Fundamentals

Self Cite

View full text Add to dashboard Cite

Identity-based encryption with equality test (IBEET) is a generalization of the traditional identity-based encryption (IBE) and public key searchable encryption, where trapdoors enable users to check whether two ciphertexts of distinct identities are encryptions of the same plaintext. By definition, IBEET cannot achieve indistinguishability security against insiders, i.e., users who have trapdoors. To address this issue, IBEET against insider attacks (IBEETIA) was later introduced as a dual primitive. While all users of IBEETIA are able to check whether two ciphertexts are encryptions of the same plaintext, only users who have tokens are able to encrypt plaintexts. Hence, IBEETIA is able to achieve indistinguishability security. On the other hand, the definition of IBEETIA weakens the notion of IBE due to its encryption inability. Nevertheless, known schemes of IBEETIA made use of rich algebraic structures such as bilinear groups and lattices. In this paper, we propose a generic construction of IBEETIA without resorting to rich algebraic structures. In particular, the only building blocks of the proposed construction are symmetric key encryption and pseudo-random permutations in the standard model. If a symmetric key encryption scheme satisfies CCA security, our proposed IBEETIA scheme also satisfies CCA security.

show abstract

On the Feasibility of Identity-Based Encryption with Equality Test Against Insider Attacks

Emura

2024

Information Security and Privacy

View full text Add to dashboard Cite

A Generic Construction of CCA-Secure Attribute-Based Encryption with Equality Test

Cited by 4 publications

References 32 publications

More Efficient Adaptively Secure Lattice-Based IBE with Equality Test in the Standard Model

More Efficient Adaptively Secure Lattice-Based IBE with Equality Test in the Standard Model

A Generic Construction of CCA-Secure Identity-Based Encryption with Equality Test against Insider Attacks

On the Feasibility of Identity-Based Encryption with Equality Test Against Insider Attacks

Contact Info

Product

Resources

About