Adaptively secure broadcast encryption under standard assumptions with better efficiency

Lee, Kwangsu; Lee, Dong Hoon

doi:10.1049/iet-ifs.2014.0102

Cited by 6 publications

(4 citation statements)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A similar approach was applied in construction of public key revocation schemes [6]- [8]. In fact, as mentioned in [9], the LP-IBR scheme follows the design principle of [7].…”

Section: Discussionmentioning

confidence: 99%

Comments on “Identity-Based Revocation From Subset Difference Methods Under Simple Assumptions”

Chun¹,

Kim

Hwang

2021

IEEE Access

View full text Add to dashboard Cite

An identity-based revocation (IBR) scheme is a useful one-to-many cryptographic message transmission method in which a message can be encrypted using receivers' identities such as e-mail addresses as public keys and a trusted message sender who holds users' private keys is not required. Recently an efficient IBR scheme was presented by combining a so-called single revocation encryption scheme and the well-known symmetric broadcast encryption called a subset difference (SD) method in IEEE ACCESS

show abstract

“…A similar approach was applied in construction of public key revocation schemes [6]- [8]. In fact, as mentioned in [9], the LP-IBR scheme follows the design principle of [7].…”

Section: Discussionmentioning

confidence: 99%

Comments on “Identity-Based Revocation From Subset Difference Methods Under Simple Assumptions”

Chun¹,

Kim

Hwang

2021

IEEE Access

View full text Add to dashboard Cite

show abstract

“…If we are willing to use complexity leveraging arguments, then it can be adaptively secure by loosing an exponential factor in the security reduction. Alternatively, we may try to use other PKBE schemes that are adaptively secure [19,26], but it is not yet clear how to combine the schemes and prove their security in multilinear maps.…”

Section: Discussionmentioning

confidence: 99%

New Constructions of Revocable Identity-Based Encryption From Multilinear Maps

Park

Lee

2015

IEEE Trans.Inform.Forensic Secur.

View full text Add to dashboard Cite

A revocation mechanism in cryptosystems for a large number of users is absolutely necessary for maintaining the security of whole systems. A revocable identity-based encryption (RIBE) provides an efficient revocation method in IBE in which a trusted authority periodically broadcasts an update key for non-revoked users and a user can decrypt a ciphertext if his private key is not revoked in the update key. Boldyreva, Goyal, and Kumar (CCS 2008) defined RIBE and proposed an RIBE scheme that uses a tree-based revocation encryption scheme to revoke users' private keys. However, this approach has an inherent limitation in that the number of private key elements and update key elements cannot be constant. In this paper, to overcome this limitation, we devise a new technique for RIBE and propose RIBE schemes with a constant number of private key elements. We achieve the following results:• We first devise a new technique for RIBE that combines a hierarchical IBE (HIBE) scheme and a public-key broadcast encryption (PKBE) scheme by using multilinear maps. In contrast to the previous technique for RIBE, our technique uses a PKBE scheme in bilinear maps for revocation to achieve short private keys and update keys.• Following our new technique for RIBE, we propose an RIBE scheme in three-leveled multilinear maps that combines the HIBE scheme of Boneh and Boyen (EUROCRYPT 2004) and the PKBE scheme of Boneh, Gentry, and Waters (CRYPTO 2005). The private key and update key of our scheme possess a constant number of group elements. We introduce a new complexity assumption in multilinear maps and prove the security of our scheme in the selective revocation list model.• Next, we propose another RIBE scheme with reduced public parameters by combining the HIBE scheme of Boneh and Boyen and the PKBE scheme of Boneh, Waters, and Zhandry (CRYPTO 2014), which uses multilinear maps. Compared with our first RIBE scheme, our second RIBE scheme requires high-leveled multilinear maps since the underlying PKBE scheme is based on high-leveled multilinear maps.

show abstract

“…Boneh et al [1] proposed a fully collusion-resistant PKBE scheme in bilinear groups that achieves short ciphertexts. After that, many PKBE scheme in bilinear groups were presented [2], [5], [6], [18]- [20]. The subset cover framework also can be used to build a PKR scheme by combining it with an IBE, HIBE, or SRE scheme [7], [9], [10].…”

Section: B Related Workmentioning

confidence: 99%

Identity-Based Revocation From Subset Difference Methods Under Simple Assumptions

Lee

Park

2019

IEEE Access

Self Cite

View full text Add to dashboard Cite

Identity-based revocation (IBR) is a specific kind of broadcast encryption that can effectively send ciphertext to a set of receivers. In IBR, a ciphertext is associated with a set of revoked users instead of a set of receivers and the maximum number of users in the system can be an exponential value in the security parameter. In this paper, we reconsider the general method of Lee et al. (ESORICS 2014) that constructs a public-key revocation (PKR) scheme by combining the subset difference (SD) method of Naor, Naor, and Lotspiech (CRYPTO 2001) and a single revocation encryption (SRE) scheme. Lee et al. left it as an open problem to construct an SRE scheme under the standard assumption without random oracles. In this paper, we first propose a selectively secure SRE scheme under the standard assumption without random oracles. We also propose a fully secure SRE scheme under simple static assumptions without random oracles. Next, we present an efficient IBR scheme that supports fast decryption by combining the SD method and our SRE scheme. The security of our IBR scheme depends on that of the underlying SRE scheme. Finally, we implemented our SRE and IBR schemes and measured the performance.

show abstract

Adaptively secure broadcast encryption under standard assumptions with better efficiency

Cited by 6 publications

References 29 publications

Comments on “Identity-Based Revocation From Subset Difference Methods Under Simple Assumptions”

Comments on “Identity-Based Revocation From Subset Difference Methods Under Simple Assumptions”

New Constructions of Revocable Identity-Based Encryption From Multilinear Maps

Identity-Based Revocation From Subset Difference Methods Under Simple Assumptions

Contact Info

Product

Resources

About