Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences

CCA-Secure Leakage-Resilient Identity-Based Encryption without q-Type Assumptions

Toi Tomita, Wakaha Ogata, Kaoru Kurosawa, Ryo Kuwayama

Published Sep 30, 2020• 2 citations
Publisher

Abstract

In this paper, we propose a new leakage-resilient identity-based encryption (IBE) scheme that is secure against chosen-ciphertext attacks (CCA) in the bounded memory leakage model. The security of our scheme is based on the external k-Linear assumption. It is the first CCA-secure leakage-resilient IBE scheme which does not depend on q-type assumptions. The leakage rate 1/10 is achieved under the XDLIN assumption (k=2).

DOI
10.1587/transfun.2019dmp0013

Related papers

A Leakage-Resilient CCA-Secure Identity-Based Encryption Scheme

Jiguo Li, Meilin Teng, Yichen Zhang +1 more

Identity-based encryption (IBE) has many appealing applications. However, some traditional IBE schemes may not be secure in the real world due to the side-channel attacks. Leakage-resilient cryptography can capture these attacks by modeling information leakage that adversary can access. In this paper, we apply a hash proof technique in the existing CCA-secure variant of the Gentry's IBE scheme to construct a new leakage-resilient IBE scheme in the bounded-leakage model. The proposed scheme is more computationally efficient than the original Alwen et al. 's leakage-resilient IBE scheme. It enjoys a shorter key (public/secret key) length, and a higher relative key leakage ratio. The new leakage-resilient scheme is proved semantically secure against adaptive chosen ciphertext attack in the standard model under the truncated augmented bilinear Diffie-Hellman exponent ( |$q$| -TABDHE) assumption.

The Computer Journal•Jan 20, 2016•64 citations

Leakage resilient CCA secure IBE with all-but-one lossy filter

Zhiwei Wang

The goal of this paper is to design an id-based encryption (IBE) scheme that can flexibly tolerate leakage bounds, by only increasing the size of secret key proportionally, and the security level can be achieved to be against chosen-ciphertext attacks (CCA). As our main technical tool for CCA security, we introduce an initiation of all-but-one lossy filter, which is a simple version of all-but-many lossy filter to the leakage resilient settings. As our main result, we use the all-but-one lossy filter to construct an IBE scheme that is secure against leakage resilient chosen-ciphertext attacks (CCA), and the leakage rate is 1/2 − ο(1).

International Journal of Ad Hoc and Ubiquitous Computing•Jan 1, 2016•0 citations

Tight Leakage-Resilient Identity-based Encryption under Multi-challenge Setting

Cailing Cai, Xianrui Qin, Tsz Hon Yuen +1 more

In this work, we present the first leakage-resilient identity-based encryption (LR-IBE) scheme that features (almost) tight security under the multi-challenge setting, in which the adversary could receive multiple challenging ciphertexts from multiple users. Meanwhile, our construction enjoys security against chosen-ciphertext attack (CCA) under the Matrix Decisional Diffie-Hellman (MDDH) assumption. Apart from admitting the continual leakage of secret key, we provide strong security via additionally allowing the continual leakage of the master secret key.

ACM Asia Conference on Computer and Communications Security (ASIA CCS)•May 24, 2022•6 citations

Continuous Leakage-Resilient Identity-Based Encryption with Tight Security

Yanwei Zhou, Bo Yang, Hongxia Hou +3 more

Abstract In the actual applications, an adversary can break the security of cryptography scheme through various leakage attacks (e.g. side-channel attacks, cold-boot attacks, etc.), even the continuous leakage attacks. That is, a practical cryptography scheme must maintain its claimed security in the continuous leakage setting. However, the previous constructions on the leakage-resilient identity-based encryption (IBE) scheme could tolerate a leakage that is bounded, and cannot resist the continuous leakage attacks. In order to further achieve the better security, a novel method to build the continuous leakage-resilient IBE scheme with tight security is presented in this paper, and the scheme’s security is proved, in the standard model, based on a stronger security assumption that depends on the number of queries made by the adversary. In addition, our proposal has several advantages over previous such constructions, e.g. shorter public parameters, higher communication efficiency, tight security, etc.

The Computer Journal•Jan 3, 2019•10 citations

Receiver Selective Opening Chosen Ciphertext Secure Identity-Based Encryption

Keisuke Hara, Takahiro Matsuda, Keisuke Tanaka

In the situation where there are one sender and multiple receivers, a receiver selective opening (RSO) attack for an identity-based encryption (IBE) scheme considers adversaries that can corrupt some of the receivers and get their user secret keys and plaintexts. Security against RSO attacks for an IBE scheme ensures confidentiality of ciphertexts of uncorrupted receivers. In this paper, we formalize a definition of RSO security against chosen ciphertext attacks (RSO-CCA security) for IBE and propose the first RSO-CCA secure IBE schemes. More specifically, we construct an RSO-CCA secure IBE scheme based on an IND-ID-CPA secure IBE scheme and a non-interactive zero-knowledge proof system with unbounded simulation soundness and multi-theorem zero-knowledge. Through our generic construction, we obtain the first pairing-based and lattice-based RSO-CCA secure IBE schemes.

IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences•Aug 25, 2021•0 citations

A fully secure identity-based encryption scheme against chosen-ciphertext attack

Jing Ren, Ying Gao

Although getting a CPA secure IBE scheme is quite easy, achieving a fully secure IBE scheme against CCA is still a challenging problem nowadays. We get such a IBE scheme. First we propose a fully secure HIBE against CPA based on Waters' IBE [23]. And then, as IBE is a special case of HIBE, we use Boneh's result and technique [6] to construct a fully secure IBE against CCA.

International Conference on Information and Network Security (ICINS)•Jan 1, 2014•0 citations
In this paper, we propose a new leakage-resilient identity-based encryption (IBE) scheme that is secure against chosen-ciphertext attacks (CCA) in the bounded memory leakage model. The security of our scheme is based on the external k-Linear assumption. It is the first CCA-secure leakage-resilient IBE scheme which does not depend on q-type assumptions. The leakage rate 1/10 is achieved under the XDLIN assumption (k=2).
Identity-based encryption (IBE) has many appealing applications. However, some traditional IBE schemes may not be secure in the real world due to the side-channel attacks. Leakage-resilient cryptography can capture these attacks by modeling information leakage that adversary can access. In this paper, we apply a hash proof technique in the existing CCA-secure variant of the Gentry's IBE scheme to construct a new leakage-resilient IBE scheme in the bounded-leakage model. The proposed scheme is more computationally efficient than the original Alwen et al. 's leakage-resilient IBE scheme. It enjoys a shorter key (public/secret key) length, and a higher relative key leakage ratio. The new leakage-resilient scheme is proved semantically secure against adaptive chosen ciphertext attack in the standard model under the truncated augmented bilinear Diffie-Hellman exponent ( |qqq| -TABDHE) assumption.
The goal of this paper is to design an id-based encryption (IBE) scheme that can flexibly tolerate leakage bounds, by only increasing the size of secret key proportionally, and the security level can be achieved to be against chosen-ciphertext attacks (CCA). As our main technical tool for CCA security, we introduce an initiation of all-but-one lossy filter, which is a simple version of all-but-many lossy filter to the leakage resilient settings. As our main result, we use the all-but-one lossy filter to construct an IBE scheme that is secure against leakage resilient chosen-ciphertext attacks (CCA), and the leakage rate is 1/2 − ο(1).
In this work, we present the first leakage-resilient identity-based encryption (LR-IBE) scheme that features (almost) tight security under the multi-challenge setting, in which the adversary could receive multiple challenging ciphertexts from multiple users. Meanwhile, our construction enjoys security against chosen-ciphertext attack (CCA) under the Matrix Decisional Diffie-Hellman (MDDH) assumption. Apart from admitting the continual leakage of secret key, we provide strong security via additionally allowing the continual leakage of the master secret key.
Abstract In the actual applications, an adversary can break the security of cryptography scheme through various leakage attacks (e.g. side-channel attacks, cold-boot attacks, etc.), even the continuous leakage attacks. That is, a practical cryptography scheme must maintain its claimed security in the continuous leakage setting. However, the previous constructions on the leakage-resilient identity-based encryption (IBE) scheme could tolerate a leakage that is bounded, and cannot resist the continuous leakage attacks. In order to further achieve the better security, a novel method to build the continuous leakage-resilient IBE scheme with tight security is presented in this paper, and the scheme’s security is proved, in the standard model, based on a stronger security assumption that depends on the number of queries made by the adversary. In addition, our proposal has several advantages over previous such constructions, e.g. shorter public parameters, higher communication efficiency, tight security, etc.
In the situation where there are one sender and multiple receivers, a receiver selective opening (RSO) attack for an identity-based encryption (IBE) scheme considers adversaries that can corrupt some of the receivers and get their user secret keys and plaintexts. Security against RSO attacks for an IBE scheme ensures confidentiality of ciphertexts of uncorrupted receivers. In this paper, we formalize a definition of RSO security against chosen ciphertext attacks (RSO-CCA security) for IBE and propose the first RSO-CCA secure IBE schemes. More specifically, we construct an RSO-CCA secure IBE scheme based on an IND-ID-CPA secure IBE scheme and a non-interactive zero-knowledge proof system with unbounded simulation soundness and multi-theorem zero-knowledge. Through our generic construction, we obtain the first pairing-based and lattice-based RSO-CCA secure IBE schemes.