New application of partitioning methodology: identity‐based dual receiver encryption

Abstract

Dual receiver encryption (DRE), a notion of public key encryption (PKE) introduced at CCS'04, allows two independent receivers to decrypt a ciphertext into a same plaintext. This crypto primitive is quite useful in designing denial of service attack‐resilient protocols. To our knowledge, prior DRE constructions are considered in the traditional PKE settings, which may face the difficulty of certificate management. This paper aiming at solving this dilemma of DRE in the traditional PKE settings, and gives an identity‐based variant version of DRE: identity‐based dual receiver encryption (ID‐DRE) that combines the notion of DRE and identity‐based encryption (IBE). Based on Waters' IBE (Crypto'05), two ID‐DRE schemes are constructed in the standard model and by partitioning methodology, provable security of our ID‐DRE schemes are obtained under the decisional bilinear Diffie‐Hellman. Furthermore, we achieve a tighter reduction by adopting a random walk‐like methodology of analysis on the lower bound of simulators' artificial abort, which also results in better security tightness for Waters IBE. This improved result scriptO(n·q) for Waters' IBE, where n is the bitlength of messages and q is the number of adversarial key queries, is consistent with Hofheinz and Kiltz's result (Crypto'08). Copyright © 2017 John Wiley & Sons, Ltd.

(Identity-based) dual receiver encryption from lattice-based programmable hash functions with high min-entropy

“…Definition 2 (Identity-based dual receiver encryption (IB-DRE) (Zhang et al 2016a)) An identity-based dual receiver encryption scheme IB-DRE = (Setup ID , KeyGen ID , Enc ID , Dec ID ) is defined as follows: PP, Msk). The setup algorithm on inputs a security parameter 1 λ , outputs a pair of public parameters and master secret key (PP, Msk).…”

“…Ten years later, S. Chow, Franklin and Zhang (Chow et al 2014) the notion of DRE and appended some appealing features for DRE. Zhang et al (2016a) extended the DRE in publickey setting to the identity-based setting: identity-based dual receiver encryption (IB-DRE), so as to handle the difficulty of certificate management.…”

“…Later on, Chow, Franklin, and Zhang (Chow et al 2014) proposed a CCA secure DRE scheme via combining a selective-tag weakly CCA-secure tag-based DRE (based on the tag-based encryption scheme in Kiltz (2006)) and a strong one-time signature scheme, as well as other DRE instantiations for non-malleable and other properties 1 . Recently, Zhang et al (2016a) constructed two provably secure IB-DRE schemes against adaptively chosen plaintext or ciphertext and chosen identity attacks based on an identity-based encryption scheme in (Waters 2005).…”

“…Constructions from lattices. As studied in (Chow et al 2014;Zhang et al 2016a), the DRE or IB-DRE can be viewed as a special instance of broadcast encryption (BE, for short) or identity-based broadcast encryption (IBBE, for short) primitive which supports multiple recipients in an encryption system. So a construction of BE or IBBE implies a construction of DRE or IB-DRE.…”

New Constructions of Identity-Based Dual Receiver Encryption from Lattices

“…As a special kind of PKE, DRE also face the general certificate management problem. To solve the problem of certificate management in the traditional PKE, Zhang et al [ 4 ] gave an identity-based variant version of DRE, named identity-based dual receiver encryption (IB-DRE). In this scheme, they constructed two IB-DRE schemes based on the identity-based encryption (IBE) scheme in [ 5 ].…”