The data security of fog computing is a key problem for the Internet of things. Identity-based encryption (IBE) from lattices is extremely suitable for fog computing. It is able to not only simplify certificate management, but also resist quantum attacks. In this paper, firstly, we construct a novel efficient lattice-based IBE scheme with Combined Public Key (CPK) technique by keeping from consumptive trapdoor generation algorithm and preimage sampling algorithm, which is required by the existing lattice-based IBE schemes based on learning with errors (LWE). In addition, its key storage cost is lower and it is IND-ID-CPA secure in the random oracle model. Furthermore, based on this, an enhanced lattice-based IBE scheme with IND-ID-CCA security is developed by employing strong one-time signature. Our schemes only need O(n3/log n) additions of vectors, while the existing schemes need at least O(n3) of additions and multiplications in Setup and Extract phase.
The data security of fog computing is a key problem for the Internet of things. Identity-based encryption (IBE) from lattices is extremely suitable for fog computing. It is able to not only simplify certificate management, but also resist quantum attacks. In this paper, firstly, we construct a novel efficient lattice-based IBE scheme with Combined Public Key (CPK) technique by keeping from consumptive trapdoor generation algorithm and preimage sampling algorithm, which is required by the existing lattice-based IBE schemes based on learning with errors (LWE). In addition, its key storage cost is lower and it is IND-ID-CPA secure in the random oracle model. Furthermore, based on this, an enhanced lattice-based IBE scheme with IND-ID-CCA security is developed by employing strong one-time signature. Our schemes only need O(n3/log n) additions of vectors, while the existing schemes need at least O(n3) of additions and multiplications in Setup and Extract phase.
The rapid expansion of the Internet of Things (IoT) has led to an unprecedented scale of data exchange across heterogeneous and resource-constrained devices. Ensuring confidentiality and secure key management in such environments is challenging. Traditional public-key infrastructures require heavy certificate-handling overhead. Identity-Based Encryption (IBE) offers a lightweight alternative by deriving public keys directly from device identities, making it attractive for IoT deployments. However, IoT devices are highly vulnerable to side-channel and key-extraction attacks, motivating the need for Forward-Secure IBE(FS-IBE), where the compromise of a current secret key does not threaten past communications. Existing FS-IBE constructions based on classical hardness assumptions are not secure in the era of post-quantum, while the lattice-based (LWE-based) forward-secure scheme suffer from large key and ciphertext sizes, limiting their suitability for constrained IoT systems. Here, we propose a new lattice-based fs-IBE scheme in the ring setting, relying on the RLWE assumption to achieve post-quantum security and significant efficiency gains. Our design uses trapdoor delegation with a minimal-cover mechanism over a binary tree. It results in compact public parameters and efficient per-epoch key updates. Compared to prior LWE-based constructions, our scheme reduces public key, secret key, and ciphertext sizes, and thus, making it better suited for practical IoT environments.
At present, most of the identity based encryption (IBE) schemes from the lattice originate from the results of Gentry et.al., and regard each identity as a bit string with equal length and then map a matrix to every bit of identity string. Consequently, they are considerably less efficient. In our paper, we construct an IBE which is efficient from standard learning with errors problem and handles identities as a chunk for performance. In the standard model, our paper gives a proof which our IBE is IND-sID-CCA secure. Mean-while, we also show which our IBE construction is also IND-ID-CCA secure via the technique i.e., imposing additional restrictions on the identities, presented by Boyen and Boneh.
The identity-based encryption (IBE) scheme takes the user's identity as the public key, which avoids the disadvantages of digital certificate management. Lattice-based IBE scheme has the advantages of resistant to quantum attack, high efficiency and simple structure, and has become a research hotspot in the field of post-quantum information security. In this paper, an IBE scheme is designed based on NTRU lattice, and the hybrid sampling algorithm proposed by Ducas and Prest is used in the private key extraction algorithm of the scheme, which improves the implementation efficiency of the key generation algorithm while ensuring the security of the private key. The encryption and decryption algorithm of the IBE scheme is designed by using the framework structure of the encryption algorithm based on the LWE problem. Under the condition that the NTRU difficulty hypothesis and the LWE difficulty hypothesis hold simultaneously, the scheme is proved to have indistinguishability under chosen plaintext attack with identity-based encryption (IND-ID-CPA). The software implementation of the scheme and the efficiency under the specific parameter settings are given, and the experimental results show that the new scheme has higher encryption and decryption efficiency and shorter ciphertext length than the typical lattice IBE scheme.
The identity-based encryption (IBE) scheme takes the user's identity as the public key, which avoids the disadvantages of digital certificate management. Lattice-based IBE scheme has the advantages of resistant to quantum attack, high efficiency and simple structure, and has become a research hotspot in the field of post-quantum information security. In this paper, an IBE scheme is designed based on NTRU lattice, and the hybrid sampling algorithm proposed by Ducas and Prest is used in the private key extraction algorithm of the scheme, which improves the implementation efficiency of the key generation algorithm while ensuring the security of the private key. The encryption and decryption algorithm of the IBE scheme is designed by using the framework structure of the encryption algorithm based on the LWE problem. Under the condition that the NTRU difficulty hypothesis and the LWE difficulty hypothesis hold simultaneously, the scheme is proved to have indistinguishability under chosen plaintext attack with identity-based encryption (IND-ID-CPA). The software implementation of the scheme and the efficiency under the specific parameter settings are given, and the experimental results show that the new scheme has higher encryption and decryption efficiency and shorter ciphertext length than the typical lattice IBE scheme.
An efficient identity-based encryption (IBE) scheme over lattice is proposed in this paper. Under the hardness of the learning with errors (LWE) problem, the proposed scheme is semantic secure against adaptive chosen identity and chosen plaintext attack in the standard model. To improve the efficiency of the lattice-based IBE scheme, unlike the identity string is encoded into a matrix by a group of public matrices in several known constructions, the identity string of l bits is encoded into a vector with the help of l+1 vectors in this paper. With the help of this idea, we achieve the private key extraction of IBE scheme at the same lattice. Then, the public key of the proposed scheme only consists of one n×m matrix and l+1 vectors, compared with that the public keys of the known lattice-based IBE schemes all consist as a group of n×m matrices. Hence, the public key size of this scheme is shorter than that of the known constructions.
Proxy re-encryption plays an important role for data security in cloud computing and big data, but the traditional re-encryption scheme based on the classical number theory problem cannot resist quantum attack, and the lattice-based cryptosystem has been proved to have the ability to resist quantum attack, so the lattice-based re-encryption scheme has always been a research hotspot. In view of the problem that collusion-resistance and multi-hop cannot be satisfied at the same time in existing schemes, this paper proposes a new identity-based proxy re-encryption scheme on lattice. Firstly, the scheme uses trapdoors as private keys to achieve one-way anti-collusion. In addition, we construct a variant of Learning with Errors (LWE), which uses a convert algorithm to transform the user matrix and replace the vector with a uniform matrix, so that the scheme can meet the requirements of multi-hop and encrypt multiple bits of messages at one time. Theoretical analysis and experimental simulation prove that the security of the new scheme can be reduced to a decision LWE problem, which can reach the IND-sID-CPA security in the standard model and can improve the encryption efficiency while ensuring the security.