Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Jisuanji yingyong yanjiu

Cryptanalysis and improvement of identity-based broadcast encryption scheme

Wang Xu-ana

Published Jan 1, 2013• 0 citations
OpenAlex

Abstract

Identity-based broadcast encryption scheme using new techniques for dual system encryption,claimed the scheme could achieve full security and constant-size key and ciphertext in the standard model without tags.However,this paper showed that the proposal was not secure.Furthermore,this paper improved the scheme to be a secure one and proved its security in the standard model by using dual system encryption.

Related papers

Adaptively Secure Identity-Based Broadcast Encryption With a Constant-Sized Ciphertext

Jongkil Kim, Willy Susilo, Man Ho Au +1 more

In this paper, we present an adaptively secure identity-based broadcast encryption system featuring constant sized ciphertext in the standard model. The size of the public key and the private keys of our system are both linear in the maximum number of receivers. In addition, our system is fully collusion-resistant and has stateless receivers. Compared with the state-of-the-art, our scheme is well optimized for the broadcast encryption. The computational complexity of decryption of our scheme depends only on the number of receivers, not the maximum number of receivers of the system. Technically, we employ dual system encryption technique and our proposal offers adaptive security under the general subgroup decisional assumption. Our scheme demonstrates that the adaptive security of the schemes utilizing a composite order group can be proven under the general subgroup decisional assumption, while many existing systems working in a composite order group are secure under multiple subgroup decision assumptions. We note that this finding is of an independent interest, which may be useful in other scenarios.

IEEE Transactions on Information Forensics and Security•Jan 1, 2015•72 citations

Cryptanalysis of a Fuzzy Identity Based Encryption Scheme in the Standard Model

Xu An Wang, Xiaoyuan Yang, Minqing Zhang +1 more

Fuzzy identity based encryption (FIBE), proposed by Sahai and Waters, is a new kind of identity based encryption. It allows users with identity w can decrypt ciphertext for w' if and only if w is close enough to w'. Recently, Ren et al. proposed a new FIBE scheme and claimed it is fully CCA2 secure in the standard model with a tight reduction. However, in this paper we will show that their scheme is not correct. Furthermore, the key generation process of their scheme cannot resist the collusion attack, which is a basic security requirement for FIBE. At last, we propose a new fully secure FIBE scheme based on the Sahai–Waters FIBE scheme and prove its security by using the “dual system encryption” technique.

Informatica•Jan 1, 2012•6 citations

On the Security of Luo et al.'s Fully Secure Hierarchical Identity Based Encryption Scheme

Kwangsu Lee, Jong Hwan Park, Dong Hoon Lee

Recently, Luo et al. proposed an efficient hierarchical identity based encryption (HIBE) scheme with constant size of ciphertexts, and proved its full security under standard assumptions. To construct the scheme, they used the dual system encryption technique of Waters, and devised a method that compresses the tag values of dual system encryption. In this paper, we show that the security proof of Luo et al. is wrong since there exists an algorithm that distinguishes whether it is a simulation or not.

IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences•Jan 1, 2012•1 citation

Identity-Based Encryption (3)

Seong Oun Hwang, Intae Kim, Wai‐Kong Lee

This chapter provides the details of the Waters’ Identity-Based Encryption (IBE) scheme. It provides the preliminaries including the security model and hardness assumptions for the IBE scheme. The chapter gives the dual system encryption followed by the Waters’ IBE. In 2009, Waters proposed a new methodology called dual system encryption that allows us to prove that an IBE scheme is fully (adaptively) secure based on static assumptions without random oracle. The crux of Waters’ strategy is to move to a security game where both the challenge ciphertext and secret keys are semi-functional. At this point, any keys the challenger gives out are not useful in decrypting the ciphertext.

CRC Press eBooks•Feb 19, 2021•0 citations

Forward-secure identity-based encryption with direct chosen-ciphertext security in the standard model

Yang Lu, Jiguo Li

The paradigm of forward security provides a promising approach to deal with the key exposure problem as it can effectively minimize the damage caused by the key exposure. In this paper, we develop a new forward-secure identity-based encryption scheme without random oracles. We formally prove that the proposed scheme is secure against adaptive chosen-ciphertext attacks in the standard model. In the proposed scheme, the running time of the private key extraction and decryption algorithms and the sizes of the user's initial private key and the ciphertext are independent on the total number of time periods, and any other performance parameter has at most log-squared complexity in terms of the total number of time periods. Compared with the previous forward-secure identity-based encryption schemes, the proposed scheme enjoys obvious advantage in the overall performance. To the best of our knowledge, it is the first forward-secure identity-based encryption scheme that achieves direct chosen-ciphertext security in the standard model.

Advances in Mathematics of Communications•Jan 1, 2017•6 citations

Forward-Secure Identity-based Broadcast Encryption Scheme from Lattice

Xinwen Zhang, Shangping Wang, Wenpeng Zhang

Motivated by an identity-based broadcast encryption scheme from lattice(1) and a forward-secure identity-based encryption scheme(2), we propose a forward-secure identity-based broadcast encryption scheme from lattice by adding the forward-security mechanism on broadcast encryption scheme. Our scheme satisfies the security requirements of both the broadcast encrypt ion scheme and forward-security scheme, that is, it is forward-secure for the secret keys used previously, and we prove that it is semantic secure based on LWE (Learning With Error)assumption(3) in the random oracle model. In addition, our construction is believed to be secure against quantum computer.

Applied Mathematics & Information Sciences•Jan 1, 2015•3 citations
Identity-based broadcast encryption scheme using new techniques for dual system encryption,claimed the scheme could achieve full security and constant-size key and ciphertext in the standard model without tags.However,this paper showed that the proposal was not secure.Furthermore,this paper improved the scheme to be a secure one and proved its security in the standard model by using dual system encryption.
In this paper, we present an adaptively secure identity-based broadcast encryption system featuring constant sized ciphertext in the standard model. The size of the public key and the private keys of our system are both linear in the maximum number of receivers. In addition, our system is fully collusion-resistant and has stateless receivers. Compared with the state-of-the-art, our scheme is well optimized for the broadcast encryption. The computational complexity of decryption of our scheme depends only on the number of receivers, not the maximum number of receivers of the system. Technically, we employ dual system encryption technique and our proposal offers adaptive security under the general subgroup decisional assumption. Our scheme demonstrates that the adaptive security of the schemes utilizing a composite order group can be proven under the general subgroup decisional assumption, while many existing systems working in a composite order group are secure under multiple subgroup decision assumptions. We note that this finding is of an independent interest, which may be useful in other scenarios.
Fuzzy identity based encryption (FIBE), proposed by Sahai and Waters, is a new kind of identity based encryption. It allows users with identity w can decrypt ciphertext for w' if and only if w is close enough to w'. Recently, Ren et al. proposed a new FIBE scheme and claimed it is fully CCA2 secure in the standard model with a tight reduction. However, in this paper we will show that their scheme is not correct. Furthermore, the key generation process of their scheme cannot resist the collusion attack, which is a basic security requirement for FIBE. At last, we propose a new fully secure FIBE scheme based on the Sahai–Waters FIBE scheme and prove its security by using the “dual system encryption” technique.
Recently, Luo et al. proposed an efficient hierarchical identity based encryption (HIBE) scheme with constant size of ciphertexts, and proved its full security under standard assumptions. To construct the scheme, they used the dual system encryption technique of Waters, and devised a method that compresses the tag values of dual system encryption. In this paper, we show that the security proof of Luo et al. is wrong since there exists an algorithm that distinguishes whether it is a simulation or not.
This chapter provides the details of the Waters’ Identity-Based Encryption (IBE) scheme. It provides the preliminaries including the security model and hardness assumptions for the IBE scheme. The chapter gives the dual system encryption followed by the Waters’ IBE. In 2009, Waters proposed a new methodology called dual system encryption that allows us to prove that an IBE scheme is fully (adaptively) secure based on static assumptions without random oracle. The crux of Waters’ strategy is to move to a security game where both the challenge ciphertext and secret keys are semi-functional. At this point, any keys the challenger gives out are not useful in decrypting the ciphertext.
The paradigm of forward security provides a promising approach to deal with the key exposure problem as it can effectively minimize the damage caused by the key exposure. In this paper, we develop a new forward-secure identity-based encryption scheme without random oracles. We formally prove that the proposed scheme is secure against adaptive chosen-ciphertext attacks in the standard model. In the proposed scheme, the running time of the private key extraction and decryption algorithms and the sizes of the user's initial private key and the ciphertext are independent on the total number of time periods, and any other performance parameter has at most log-squared complexity in terms of the total number of time periods. Compared with the previous forward-secure identity-based encryption schemes, the proposed scheme enjoys obvious advantage in the overall performance. To the best of our knowledge, it is the first forward-secure identity-based encryption scheme that achieves direct chosen-ciphertext security in the standard model.
Motivated by an identity-based broadcast encryption scheme from lattice(1) and a forward-secure identity-based encryption scheme(2), we propose a forward-secure identity-based broadcast encryption scheme from lattice by adding the forward-security mechanism on broadcast encryption scheme. Our scheme satisfies the security requirements of both the broadcast encrypt ion scheme and forward-security scheme, that is, it is forward-secure for the secret keys used previously, and we prove that it is semantic secure based on LWE (Learning With Error)assumption(3) in the random oracle model. In addition, our construction is believed to be secure against quantum computer.