Concessive Online/Offline Attribute Based Encryption with Cryptographic Reverse Firewalls—Secure and Efficient Fine-Grained Access Control on Corrupted Machines

Ma, Hui; Zhang, Rui; Yang, Guomin; Song, Zishuai; Sun, Shuzhou; Xiao, Yuting

doi:10.1007/978-3-319-98989-1_25

Cited by 26 publications

(23 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although diverse ABE schemes can meet the functional requirements of practical applications, the efficiency problem is still a huge challenge, especially for users with limited resources. Currently, a number of mechanisms have been used to improve the practicability of ABE schemes, such as online/offline technology [9], [26], [27] and outsourcing technology [17], [28], [29]. However, their schemes have a common insufficient that the use of bilinear pairing affects its efficiency.…”

Section: Related Workmentioning

confidence: 99%

Efficient and Secure Ciphertext-Policy Attribute-Based Encryption Without Pairing for Cloud-Assisted Smart Grid

Wang

Chen

et al. 2020

IEEE Access

View full text Add to dashboard Cite

Cloud-assisted smart grid has been broadly deployed to improve the economics, efficiency, sustainability, and reliability of electricity services. The new revolution of technology will also bring new challenges to data security, particularly data confidentiality. As a promising encryption method for supporting fine-grained access control, attribute-based encryption (ABE) is widely given attention by the academia and industry. However, most existing schemes suffer from the efficiency problem limiting its deployment for the cloud-assisted smart grid, especially for resource-limited users. To address this problem, this paper proposes two efficient pairing-free ciphertext-policy attribute-based schemes that eliminate the computation-intensive bilinear pairing operation. The basic scheme only uses some simple scalar multiplications based on elliptic curves, and the enhanced scheme provides an important usability feature, namely the users and attributes revocation. The security of the proposed schemes is reduced to the elliptic curve decisional Diffie-Hellman problem. Finally, the performance analysis and extensive experiments demonstrate that our proposed schemes are suitable for the cloud-assisted smart grid. INDEX TERMS Cloud-assisted smart grid, access control, ciphertext-policy attribute-based encryption, pairing-free.

show abstract

Section: Related Workmentioning

confidence: 99%

Efficient and Secure Ciphertext-Policy Attribute-Based Encryption Without Pairing for Cloud-Assisted Smart Grid

Wang

Chen

et al. 2020

IEEE Access

View full text Add to dashboard Cite

show abstract

“…Camenisch, Drijvers and Lehmann [9] consider Direct Anonymous Attestation in the presence of a subverted Trusted Platform Module. Cryptographic reverse firewalls [20,12,19] represent an architecture to counter ASAs via trusted code in network perimeter filters. Fischlin and Mazaheri show how to construct ASA-resistant encryption and signature algorithms given initial access to a trusted base scheme [16].…”

Section: Contributionsmentioning

confidence: 99%

Subverting Decryption in AEAD

Armour

Poettering

2019

Lecture Notes in Computer Science

View full text Add to dashboard Cite

This work introduces a new class of Algorithm Substitution Attack (ASA) on Symmetric Encryption Schemes. ASAs were introduced by Bellare, Paterson and Rogaway in light of revelations concerning mass surveillance. An ASA replaces an encryption scheme with a subverted version that aims to reveal information to an adversary engaged in mass surveillance, while remaining undetected by users. Previous work posited that a particular class of AEAD scheme (satisfying certain correctness and uniqueness properties) is resilient against subversion. Many if not all real-world constructions -such as GCM, CCM and OCB -are members of this class. Our results stand in opposition to those prior results. We present a potent ASA that generically applies to any AEAD scheme, is undetectable in all previous frameworks and which achieves successful exfiltration of user keys. We give even more efficient non-generic attacks against a selection of AEAD implementations that are most used in practice. In contrast to prior work, our new class of attack targets the decryption algorithm rather than encryption. We argue that this attack represents an attractive opportunity for a mass surveillance adversary. Our work serves to refine the ASA model and contributes to a series of papers that raises awareness and understanding about what is possible with ASAs.

show abstract

“…Very recently, Chen [2] proposed a new scalable SPHF for instantiating the OSBE protocol with CRF, as well as a new framework that includes the DDHbased OT-CRF structure proposed by Mironov and Stephens-Davidowitz [1] and a new structure generated under the klinear assumption. Ma et al [11] proposed an online/offline ABE scheme with CRF, which motives this work since none of the previous schemes applied reverse firewall to the multiauthority KP-ABE scheme based on a non-monotonic access structure.…”

Section: B Related Workmentioning

confidence: 99%

“…However, there are some applications of CRF deployed in many cryptosystems, but less studied and deployed in Attribute-Based Encryption (ABE) field, this is because deploying CRF protections on ABE schemes seem to incur some additional costs. Very recently, Ma et al [11] borrow the online/offline insight and deploy a CRF protection for an online/offline ABE scheme, where three reverse firewall are used to re-randomize variables in generating keys and ciphertexts. They provide an optimization on the online computation efficiency of the reverse firewalls by splitting the computation for the algorithms in ABE into two phases but not a generic method for deploying CRF into ABE system.…”

Section: Introductionmentioning

confidence: 99%

Multi-Authority Non-Monotonic KP-ABE With Cryptographic Reverse Firewall

et al. 2019

View full text Add to dashboard Cite

The revelations of Snowden show that hardware and software of devices may corrupt users' machine to compromise the security in various ways. To address this concern, Mironov and Stephen-Davidowitz introduce the Cryptographic Reverse Firewall (CRF) concept that is able to resist the ex-filtration of secret information for some compromised machine (Eurocrypt 2015). There are some applications of CRF deployed in many cryptosystems, but less studied and deployed in Attribute-Based Encryption (ABE) field, which attracts a wide range of attention and is employed in real-world scenarios (i.e., data sharing in cloud). In this work, we focus how to give a CRF security protection for a multi-authority ABE scheme and hence propose a multi-authority key-policy ABE scheme with CRF (acronym, MA-KP-ABE-CRF), which supports attribute distribution and non-monotonic access structure. To achieve this, beginning with revisiting a MA-KP-ABE with non-trivial combining non-monotonic formula, we then give the randomness of ciphertexts and secret keys with reverse firewall and give formal security analysis. Finally, we give a simulation on our MA-KP-ABE-CRF system based on Charm library whose the experimental results demonstrate practical efficiency. INDEX TERMS Attribute-based encryption, cryptographic reverse firewall, multi-authority, non-monotonic access structure.

show abstract

Concessive Online/Offline Attribute Based Encryption with Cryptographic Reverse Firewalls—Secure and Efficient Fine-Grained Access Control on Corrupted Machines

Cited by 26 publications

References 24 publications

Efficient and Secure Ciphertext-Policy Attribute-Based Encryption Without Pairing for Cloud-Assisted Smart Grid

Efficient and Secure Ciphertext-Policy Attribute-Based Encryption Without Pairing for Cloud-Assisted Smart Grid

Subverting Decryption in AEAD

Multi-Authority Non-Monotonic KP-ABE With Cryptographic Reverse Firewall

Contact Info

Product

Resources

About