Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Chosen Ciphertext Secure Identity-based Encryption in the Standard Model

Xiangsong Zhang

Published Jan 1, 2009• 0 citations
OpenAlex

Abstract

In Eurocrypt 2005,Waters' identity-based encryption scheme suffers from a drawback that the scheme only guarantees chosen plaintext security,which hampers its applications in higher security level environments.A chosen ciphertext secure identity-based encryption scheme was proposed to remedy this drawback.The proposed encryption scheme was regarded as the extended version of Waters' scheme with only one additional element in the ciphertext,and guaranteed chosen ciphertext security.The extended scheme's indistinguishability against adaptive chosen ciphertext attacks was proven in the standard model and rested on the hardness of the decisional bilinear Diffie-Hellman intractability assumption.

Related papers

Identity-Based Threshold Decryption Schemes Secure against Chosen Ciphertext Attacks in the Standard Model

Mei Qi, He Da

We propose two efficient Identity-Based threshold decryption schemes.They are proved secure against chosen ciphertext attacks under the standard decisional bilinear Diffie-Hellman assumption.The first one is constructed from(one of) the Selective ID-Based Encryption(Selective-IBE) scheme proposed by Boneh and Boyen recently,yet the second one is transformed from the Full ID-Based Encryption(Full-IBE) scheme obtained by Waters.As the based IBE schemes,the attacker in the first proposal has to choose the challenge identity before the common parameter is generated.while the attacker in the second one could choose the identity adaptively.To the best of our knowledge,previous related schemes could only be proved secure in the random oracle model.

Journal of the Graduate School of the Chinese Academy of Sciences•Jan 1, 2006•1 citation

CCA-Secure Deterministic Identity-Based Encryption Scheme

Bo Yang, Kaitai Liang, Liang Xue +3 more

Deterministic public-key encryption, encrypting a plaintext into a unique ciphertext without involving any randomness, was introduced by Bellare, Boldyreva, and O'Neill (CRYPTO 2007) as a realistic alternative to some inherent drawbacks in randomized public-key encryption. Bellare, Kiltz, Peikert and Waters (EUROCRYPT 2012) bring deterministic public-key encryption to the identity-based setting, and propose deterministic identity-based encryption scheme (DIBE). Although the construc- tions of chosen plaintext attack (CPA) secure DIBE scheme have been studied intensively, the construction of chosen ciphertext attack (CCA) secure DIBE scheme is still challenging problems. In this paper, we introduce the notion of identity-based all-but-one trapdoor functions (IB-ABO-TDF), which is an extension version of all-but-one lossy trapdoor function in the public-key setting. We give a instantiation of IB-ABO-TDF under decisional linear assumption. Based on an identity-based lossy trapdoor function and our IB-ABO-TDF, we present a generic construction of CCA-secure DIBE scheme.

•Apr 7, 2020•0 citations

A Leakage-Resilient CCA-Secure Identity-Based Encryption Scheme

Jiguo Li, Meilin Teng, Yichen Zhang +1 more

Identity-based encryption (IBE) has many appealing applications. However, some traditional IBE schemes may not be secure in the real world due to the side-channel attacks. Leakage-resilient cryptography can capture these attacks by modeling information leakage that adversary can access. In this paper, we apply a hash proof technique in the existing CCA-secure variant of the Gentry's IBE scheme to construct a new leakage-resilient IBE scheme in the bounded-leakage model. The proposed scheme is more computationally efficient than the original Alwen et al. 's leakage-resilient IBE scheme. It enjoys a shorter key (public/secret key) length, and a higher relative key leakage ratio. The new leakage-resilient scheme is proved semantically secure against adaptive chosen ciphertext attack in the standard model under the truncated augmented bilinear Diffie-Hellman exponent ( |$q$| -TABDHE) assumption.

The Computer Journal•Jan 20, 2016•64 citations

CCA Secure IB-KEM from the Computational Bilinear Diffie-Hellman Assumption in the Standard Model.

Yu Chen, Liqun Chen, Zongyang Zhang

Abstract. In this paper, we propose several selective-identity chosen-ciphertext attack secure identity based key encapsulation (IB-KEM) schemes that are provably secure under the computational bilinear Diffie-Hellman (CBDH) assumption in the standard model. Our schemes compare favorably to previous results in efficiency. With delicate modification, our schemes can be strengthened to be full-identity CCA secure easily.

•Jan 1, 2011•1 citation

Efficient Generic Construction of CCA-Secure Identity-Based Encryption from Randomness Extraction

Joonsang Baek, Duncan S. Wong, Jin Li +1 more

We propose a generic construction that yields efficient identity-based encryption (IBE) schemes secure against chosen ciphertext attack (CCA) in the standard model. Our construction extends Kiltz et al.'s (Eurocrypt '09) method of constructing CCA-secure public-key encryption schemes via randomness extraction to the identity-based setting. The main idea of our construction is to transform ‘|$\epsilon _1$|-almost |$\kappa $|-entropic’ and valid/invalid ciphertext indistinguishable (VI-IND) identity-based hash proof system to the one that satisfies the stronger ‘|$\epsilon _2$|-universal’ and VI-IND property. This transformation is realized by a randomness extractor based on the 4-wise hash function. We demonstrate that our generic construction can produce CCA-secure IBE schemes whose efficiency is comparable with the most efficient but non-generic CCA-secure IBE schemes without random oracles in the literature.

The Computer Journal•Sep 3, 2015•4 citations

Full Secure Identity-Based Encryption Scheme over Lattices in the Standard Model

Wang Jizhong, Wang Chunxiao

Using a known lattice-based chosen plain-text secure encryption scheme and the Bonsai trees primitive, a identity-based encryption (IBE) scheme is proposed in this paper. A public matrices chosen rule that has been used in a known efficient lattice-based chosen ciphtertext secure encryption scheme is used in this paper to reduce the public key size and the message-to ciphtertext expanse factor. Under the hardness of the decision variant of the learning with errors (LWE) problem, we prove that the proposed IBE scheme is indistinguishable against the adaptive chosen identities and chosen-plaintext attack in the standard model. Since a new public key chosen rule is used in our design scheme, the public key size of the proposed scheme would be short. Moreover, the message-to-ciphtertext expanse factor of this scheme is also controlled efficiently which is nearly closed to that of Gentry's scheme. Due to the quantum intractability of the LWE problem on which the scheme is based, the proposed IBE scheme is secure even in quantum-era.

International Conference on P2P, Parallel, Grid, Cloud and Internet Computing (3PGCIC)•Nov 1, 2015•3 citations
In Eurocrypt 2005,Waters' identity-based encryption scheme suffers from a drawback that the scheme only guarantees chosen plaintext security,which hampers its applications in higher security level environments.A chosen ciphertext secure identity-based encryption scheme was proposed to remedy this drawback.The proposed encryption scheme was regarded as the extended version of Waters' scheme with only one additional element in the ciphertext,and guaranteed chosen ciphertext security.The extended scheme's indistinguishability against adaptive chosen ciphertext attacks was proven in the standard model and rested on the hardness of the decisional bilinear Diffie-Hellman intractability assumption.
We propose two efficient Identity-Based threshold decryption schemes.They are proved secure against chosen ciphertext attacks under the standard decisional bilinear Diffie-Hellman assumption.The first one is constructed from(one of) the Selective ID-Based Encryption(Selective-IBE) scheme proposed by Boneh and Boyen recently,yet the second one is transformed from the Full ID-Based Encryption(Full-IBE) scheme obtained by Waters.As the based IBE schemes,the attacker in the first proposal has to choose the challenge identity before the common parameter is generated.while the attacker in the second one could choose the identity adaptively.To the best of our knowledge,previous related schemes could only be proved secure in the random oracle model.
Deterministic public-key encryption, encrypting a plaintext into a unique ciphertext without involving any randomness, was introduced by Bellare, Boldyreva, and O'Neill (CRYPTO 2007) as a realistic alternative to some inherent drawbacks in randomized public-key encryption. Bellare, Kiltz, Peikert and Waters (EUROCRYPT 2012) bring deterministic public-key encryption to the identity-based setting, and propose deterministic identity-based encryption scheme (DIBE). Although the construc- tions of chosen plaintext attack (CPA) secure DIBE scheme have been studied intensively, the construction of chosen ciphertext attack (CCA) secure DIBE scheme is still challenging problems. In this paper, we introduce the notion of identity-based all-but-one trapdoor functions (IB-ABO-TDF), which is an extension version of all-but-one lossy trapdoor function in the public-key setting. We give a instantiation of IB-ABO-TDF under decisional linear assumption. Based on an identity-based lossy trapdoor function and our IB-ABO-TDF, we present a generic construction of CCA-secure DIBE scheme.
Identity-based encryption (IBE) has many appealing applications. However, some traditional IBE schemes may not be secure in the real world due to the side-channel attacks. Leakage-resilient cryptography can capture these attacks by modeling information leakage that adversary can access. In this paper, we apply a hash proof technique in the existing CCA-secure variant of the Gentry's IBE scheme to construct a new leakage-resilient IBE scheme in the bounded-leakage model. The proposed scheme is more computationally efficient than the original Alwen et al. 's leakage-resilient IBE scheme. It enjoys a shorter key (public/secret key) length, and a higher relative key leakage ratio. The new leakage-resilient scheme is proved semantically secure against adaptive chosen ciphertext attack in the standard model under the truncated augmented bilinear Diffie-Hellman exponent ( |qqq| -TABDHE) assumption.
We propose a generic construction that yields efficient identity-based encryption (IBE) schemes secure against chosen ciphertext attack (CCA) in the standard model. Our construction extends Kiltz et al.'s (Eurocrypt '09) method of constructing CCA-secure public-key encryption schemes via randomness extraction to the identity-based setting. The main idea of our construction is to transform ‘|ϵ1\epsilon _1ϵ1​|-almost |$\kappa ∣−entropic’andvalid/invalidciphertextindistinguishable(VI−IND)identity−basedhashproofsystemtotheonethatsatisfiesthestronger‘∣|-entropic’ and valid/invalid ciphertext indistinguishable (VI-IND) identity-based hash proof system to the one that satisfies the stronger ‘|∣−entropic’andvalid/invalidciphertextindistinguishable(VI−IND)identity−basedhashproofsystemtotheonethatsatisfiesthestronger‘∣\epsilon _2$|-universal’ and VI-IND property. This transformation is realized by a randomness extractor based on the 4-wise hash function. We demonstrate that our generic construction can produce CCA-secure IBE schemes whose efficiency is comparable with the most efficient but non-generic CCA-secure IBE schemes without random oracles in the literature.
Using a known lattice-based chosen plain-text secure encryption scheme and the Bonsai trees primitive, a identity-based encryption (IBE) scheme is proposed in this paper. A public matrices chosen rule that has been used in a known efficient lattice-based chosen ciphtertext secure encryption scheme is used in this paper to reduce the public key size and the message-to ciphtertext expanse factor. Under the hardness of the decision variant of the learning with errors (LWE) problem, we prove that the proposed IBE scheme is indistinguishable against the adaptive chosen identities and chosen-plaintext attack in the standard model. Since a new public key chosen rule is used in our design scheme, the public key size of the proposed scheme would be short. Moreover, the message-to-ciphtertext expanse factor of this scheme is also controlled efficiently which is nearly closed to that of Gentry's scheme. Due to the quantum intractability of the LWE problem on which the scheme is based, the proposed IBE scheme is secure even in quantum-era.