This study proposes post-quantum encrypted control systems based on dynamic-key Learning with Errors (LWE) encryption schemes. The proposed method develops update maps that simultaneously update the private key and ciphertexts within the LWE framework, enabling dynamic-key encrypted control resistant to system identification attacks. The growth of errors induced by homomorphic operations is analyzed, and sufficient parameter conditions guaranteeing correct decryption at each control step are clarified. Furthermore, a design procedure for the encrypted control systems is presented based on security metrics such as sample-identifying complexity and deciphering time. A numerical example demonstrates that the proposed control systems achieve secure control against the considered system identification attack.
This study proposes post-quantum encrypted control systems based on dynamic-key Learning with Errors (LWE) encryption schemes. The proposed method develops update maps that simultaneously update the private key and ciphertexts within the LWE framework, enabling dynamic-key encrypted control resistant to system identification attacks. The growth of errors induced by homomorphic operations is analyzed, and sufficient parameter conditions guaranteeing correct decryption at each control step are clarified. Furthermore, a design procedure for the encrypted control systems is presented based on security metrics such as sample-identifying complexity and deciphering time. A numerical example demonstrates that the proposed control systems achieve secure control against the considered system identification attack.
The design of encrypted controllers, which perform control operation directly over encrypted signals via homomorphic cryptosystems, should consider both security of the control data and performance of the controller. Considering the use of Learning With Errors (LWE) based cryptosystem, in this paper, we present a design procedure for encrypted linear dynamic controllers. Providing a guideline for choosing the parameters of the cryptosystem as well as quantization, the procedure guarantees both the desired level of security and performance. Receiving the encrypted signals of the plant input as well as the output, the proposed controller is able to perform the dynamic operation over encrypted data for infinite time horizon, without the use of decryption or reset of the state. Thanks to additively and multiplicatively homomorphic property of the LWE-based cryptosystem, information of both control signals and gain matrices is protected by encryption.
Quantum-secure cryptography is a dynamic field due to its crucial role in various domains. This field aligns with the ongoing efforts in data security. Post-quantum encryption (PQE) aims to counter the threats posed by future quantum computers, highlighting the need for further improvement. Based on the learning with error (LWE) system, this paper introduces a novel asymmetric encryption technique that encrypts entire messages of n bits rather than just 1 bit. This technique offers several advantages including an additive homomorphic cryptosystem. The robustness of the proposed lightweight public key encryption method, which is based on a new version of LWE, ensures that private keys remain secure and that original data cannot be recovered by an attacker from the ciphertext. By improving encryption and decryption execution time—which achieve speeds of 0.0427 ms and 0.0320 ms, respectively—and decreasing ciphertext size to 708 bits for 128-bit security, the obtained results are very promising.
Due to the threat of future quantum computers, it is necessary to develop cryptographic schemes that are resistant to quantum attacks. Lattice based cryptographic schemes have resistance to quantum attacks and security under worst-case assumptions that are difficult to solve. To solve the problems of large size of public and private keys, low encryption efficiency, and large noise growth in identity based encryption schemes, an adaptive secure identity based all homomorphic encryption scheme based on Learning with Errors (LWE) is constructed. This scheme uses {0,1} matrices to store plaintext, significantly improving encryption efficiency compared to single bit encryption schemes. It uses key conversion technology to achieve homomorphic operations and modulus conversion technology to reduce noise. It also converts IDs into bit sequences to construct an encryption scheme for adaptive security. Compared to selective security that only provides security guarantees for specific types of attacks, adaptive security is suitable for general scenarios, providing higher security guarantees and being able to cope with more challenging attack situations. It has been proven through the LWE problem that the security of our proposed scheme satisfies IND-ID-CPA. Finally, the experimental results indicate that this scheme introduces less noise, and has higher encryption efficiency and performance.
In this work, we introduce a novel post-quantum public key encryption scheme over integers, leveraging a hybrid approach that combines large random numbers with the Learning With Errors (LWE) system. The scheme addresses the security challenges posed by quantum computing advancements, aiming to provide a robust solution resistant to quantum-based attacks. By using the unknown random number hardness assumption with enhancements to the traditional LWE framework and operating directly on integers, this approach ensures a high level of cryptographic security while maintaining computational efficiency. Extensive theoretical and experimental analyses demonstrate that the proposed encryption system achieves state-of-the-art performance: encryption execution time as low as2.45×10−5seconds, decryption time of4.47×10−5seconds, and an integrity check time of5.30×10−5seconds. Moreover, the ciphertext size is reduced to only 1330 bits while maintaining a 256 -bit security level, representing a significant reduction in storage requirements compared to conventional lattice-based approaches. These results confirm that our scheme not only provides strong quantum-resistant security guarantees but also delivers excellent efficiency and scalability, making it a viable candidate for secure communications in bandwidth-limited and resource-constrained environments in the quantum era.
Ring-LWE (Ring Learning With Errors) is a post-quantum cryptography algorithm based on mathematical problems in number theory and algebra. It is an extension of LWE (Learning With Errors) first introduced by Oded Regev and is used for secure data encryption from quantum computer attacks. The process consists of three main steps: key generation, encryption, and decryption. Key generation uses random polynomials and noise to create public and private keys. While encryption produces ciphertext in the form of polynomial pairs, decryption uses the private key to return the ciphertext to the original message. To conduct the experiment, the modulus value q = 17, the modulus polynomial f(x) = x2 + 1, and the private key and random polynomial have been determined. The results of the experiment show that the message can be accurately decrypted using the private key, thus proving the success of this algorithm in maintaining data security. With its security properties that are resistant to quantum attacks, Ring-LWE is a promising alternative for future cryptography.
Cloud storage faces significant security and access control challenges due to reduced user oversight and the emerging threat of quantum computing to traditional cryptographic methods. Existing revocable Identity-Based Encryption (IBE) schemes are limited by their lack of post quantum security, inefficient revocation mechanisms that require re-encryption of data, and cumbersome key update procedures. We propose a post-quantum secure Ring-LWE IBE scheme with dynamic time-based revocation tailored for cloud environments. Our solution is built on the hardness of the Ring Learning with Errors (RLWE) problem to ensure quantum resistance and introduces a novel time-based revocation framework. In our approach, user access is bound to discrete periods and managed through a hierarchical binary tree structured over identities and time. This design eliminates the need to re-encrypt stored data upon user revocation. Instead, a trusted authority periodically distributes lightweight key updates exclusively to non-revoked users. Thanks to the binary tree structure, non-revoked users can compute updated decryption keys with only O (log Nₘₐₓ) overhead in both computation and communication, where Nₘₐₓ is the maximum number of users or periods. Revoked users, having no access to future updates, lose decryption capabilities. We provide formal security proofs showing the schemes resistance against adaptive identity and time-period-based attacks, grounded in the RLWE assumption. Overall, our scheme offers an effective combination of post-quantum security, efficient access control, and simplified key management, making it suitable for secure cloud data sharing in the quantum era.