Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences

Universally Composable Identity-Based Encryption

Ryo Nishimaki, Y. MANABE, T. OKAMOTO

Published Jan 1, 2008• 4 citations
Publisher

Abstract

Identity-based encryption (IBE) is one of the most important primitives in cryptography, and various security notions of IBE (e. g., IND-ID-CCA2, NM-ID-CCA2, IND-sID-CPA etc.) have been introduced. The relations among them have been clarified recently. This paper, for the first time, investigates the security of IBE in the universally composable (UC) framework. This paper first defines the UC-security of IBE, i. e., we define the ideal functionality of IBE, FIBE. We then show that UC-secure IBE is equivalent to conventionally-secure (IND-ID-CCA2-secure) IBE.

DOI
10.1093/ietfec/e91-a.1.262

Related papers

Universally Composable Identity-Based Signature

Dingfeng Ye

Idea Functionality is the core and basic unit of Universally Composable(UC) security protocols.The first step of designing the protocols,within the UCsecurity framework,is to extract an ideal functionality from the expected functionalities of the protocols.To appropriately define an ideal functionality we should not only protect the security of the definition,but also consider the realizability.This study investigates the security of identity-based signature(IBS) within the UCframework,defines a realizable identity-based signature functionality FIBS,proves that UC-secure IBS is equivalent to conventionally-secure(EUF-CMIA-secure) IBS.As a result,we are able to make sure that the EUFCMIA scheme can be a module in designing a complex protocol that satisfies the UCrequirement.

Dianzi xuebao•Jan 1, 2011•0 citations

Identity-Based Proxy Signcryption Protocol with Universal Composability

Huifang Yu, Zhicang Wang, Jianmin Li +1 more

Proxy signcryption means that the proxy signcrypter obtains the delegate authorization from the original signcrypter and then signcrypts the specified message on behalf of the original signcrypter. In this paper, we construct an identity-based proxy signcryption protocol (IBPSP) based on the universally composable (UC) framework. In the random oracle model, we prove that this protocol has the semantic security under the gap bilinear Diffie-Hellman and computational Diffie-Hellman assumptions. At the same time, an ideal functionality of the identity-based proxy signcryption protocol is defined in the UC security framework, and we also prove the equivalence between the universally composable identity-based proxy signcryption protocol and its IND-CCA2 and UF-CMA security. Analysis shows this IBPSP has both low computation complexity and semantic security together with UC security.

Security and Communication Networks•Dec 2, 2018•20 citations

Efficient Identity-Based Encryption from Lattice

Huiyan Chen, Dongmei Chen, Yanshuo Zhang

At present, most of the identity based encryption (IBE) schemes from the lattice originate from the results of Gentry et.al., and regard each identity as a bit string with equal length and then map a matrix to every bit of identity string. Consequently, they are considerably less efficient. In our paper, we construct an IBE which is efficient from standard learning with errors problem and handles identities as a chunk for performance. In the standard model, our paper gives a proof which our IBE is IND-sID-CCA secure. Mean-while, we also show which our IBE construction is also IND-ID-CCA secure via the technique i.e., imposing additional restrictions on the identities, presented by Boyen and Boneh.

International Conference on Information Science and Cloud Computing Companion (ISCC-C)•Dec 1, 2013•0 citations

Universally Composable Secure Group Communication.

Youliang Tian, Changgen Peng

Abstract. This paper analyzes group communication within the universally composable framework. We first propose the group communication model, identity-based signcrytion mod-el and group key distribution model in the UC framework by designing the ideal functionality FSAGCOM, FIDSC and FGKD, respectively. Then, we construct a UC secure identity-based signcryption protocol πIDSC. Moreover, we shows that the identity-based signcryption πIDSC securely realizes the ideal functionality FIDSC if and only if the corresponding protocol ID-SC is secure. Finally, based on the identity-based protocol, we propose a group communica-tion scheme πSAGCOM, which can securely realizes the ideal functionality FSAGCOM in the (FIDSC,FGKD)-hybrid model.

•Jan 1, 2014•2 citations

UC-Secure Non-interactive Public-Key Encryption

Jan L. Camenisch, Anja Lehmann, Gregory Neven +1 more

The universal composability (UC) framework enables the modular design of cryptographic protocols by allowing arbitrary compositions of lower-level building blocks. Public-key encryption is unarguably a very important such building block. However, so far no UC-functionality exists that offers non-interactive encryption necessary for modular protocol construction. We provide an ideal functionality for non-committing encryption (i.e., public-key encryption secure against adaptive corruptions) with locally generated, and therefore non-interactive, ciphertexts. As a sanity check, we also provide a property-based security notion that we prove to be equivalent to the UC notion. We then show that the encryption scheme of Camenisch et al. (SCN '16) based on trapdoor permutations securely implements our notion in the random-oracle model without assuming secure erasures. This is the best one can hope to achieve as standard-model constructions do not exist due to the uninstantiability of round-optimal adaptively secure message transfer in the standard model (Nielsen, Crypto '02). We illustrate the modular reusability of our functionality by constructing the first non-interactive signcryption scheme secure against adaptive corruptions without secure erasures in the UC framework.

IEEE Computer Security Foundations Workshop (CSFW)•Aug 1, 2017•7 citations

A fully secure identity-based encryption scheme against chosen-ciphertext attack

Jing Ren, Ying Gao

Although getting a CPA secure IBE scheme is quite easy, achieving a fully secure IBE scheme against CCA is still a challenging problem nowadays. We get such a IBE scheme. First we propose a fully secure HIBE against CPA based on Waters' IBE [23]. And then, as IBE is a special case of HIBE, we use Boneh's result and technique [6] to construct a fully secure IBE against CCA.

International Conference on Information and Network Security (ICINS)•Jan 1, 2014•0 citations
Identity-based encryption (IBE) is one of the most important primitives in cryptography, and various security notions of IBE (e. g., IND-ID-CCA2, NM-ID-CCA2, IND-sID-CPA etc.) have been introduced. The relations among them have been clarified recently. This paper, for the first time, investigates the security of IBE in the universally composable (UC) framework. This paper first defines the UC-security of IBE, i. e., we define the ideal functionality of IBE, FIBE. We then show that UC-secure IBE is equivalent to conventionally-secure (IND-ID-CCA2-secure) IBE.
Idea Functionality is the core and basic unit of Universally Composable(UC) security protocols.The first step of designing the protocols,within the UCsecurity framework,is to extract an ideal functionality from the expected functionalities of the protocols.To appropriately define an ideal functionality we should not only protect the security of the definition,but also consider the realizability.This study investigates the security of identity-based signature(IBS) within the UCframework,defines a realizable identity-based signature functionality FIBS,proves that UC-secure IBS is equivalent to conventionally-secure(EUF-CMIA-secure) IBS.As a result,we are able to make sure that the EUFCMIA scheme can be a module in designing a complex protocol that satisfies the UCrequirement.
Proxy signcryption means that the proxy signcrypter obtains the delegate authorization from the original signcrypter and then signcrypts the specified message on behalf of the original signcrypter. In this paper, we construct an identity-based proxy signcryption protocol (IBPSP) based on the universally composable (UC) framework. In the random oracle model, we prove that this protocol has the semantic security under the gap bilinear Diffie-Hellman and computational Diffie-Hellman assumptions. At the same time, an ideal functionality of the identity-based proxy signcryption protocol is defined in the UC security framework, and we also prove the equivalence between the universally composable identity-based proxy signcryption protocol and its IND-CCA2 and UF-CMA security. Analysis shows this IBPSP has both low computation complexity and semantic security together with UC security.
At present, most of the identity based encryption (IBE) schemes from the lattice originate from the results of Gentry et.al., and regard each identity as a bit string with equal length and then map a matrix to every bit of identity string. Consequently, they are considerably less efficient. In our paper, we construct an IBE which is efficient from standard learning with errors problem and handles identities as a chunk for performance. In the standard model, our paper gives a proof which our IBE is IND-sID-CCA secure. Mean-while, we also show which our IBE construction is also IND-ID-CCA secure via the technique i.e., imposing additional restrictions on the identities, presented by Boyen and Boneh.
Abstract. This paper analyzes group communication within the universally composable framework. We first propose the group communication model, identity-based signcrytion mod-el and group key distribution model in the UC framework by designing the ideal functionality FSAGCOM, FIDSC and FGKD, respectively. Then, we construct a UC secure identity-based signcryption protocol πIDSC. Moreover, we shows that the identity-based signcryption πIDSC securely realizes the ideal functionality FIDSC if and only if the corresponding protocol ID-SC is secure. Finally, based on the identity-based protocol, we propose a group communica-tion scheme πSAGCOM, which can securely realizes the ideal functionality FSAGCOM in the (FIDSC,FGKD)-hybrid model.
The universal composability (UC) framework enables the modular design of cryptographic protocols by allowing arbitrary compositions of lower-level building blocks. Public-key encryption is unarguably a very important such building block. However, so far no UC-functionality exists that offers non-interactive encryption necessary for modular protocol construction. We provide an ideal functionality for non-committing encryption (i.e., public-key encryption secure against adaptive corruptions) with locally generated, and therefore non-interactive, ciphertexts. As a sanity check, we also provide a property-based security notion that we prove to be equivalent to the UC notion. We then show that the encryption scheme of Camenisch et al. (SCN '16) based on trapdoor permutations securely implements our notion in the random-oracle model without assuming secure erasures. This is the best one can hope to achieve as standard-model constructions do not exist due to the uninstantiability of round-optimal adaptively secure message transfer in the standard model (Nielsen, Crypto '02). We illustrate the modular reusability of our functionality by constructing the first non-interactive signcryption scheme secure against adaptive corruptions without secure erasures in the UC framework.