Identity-based encryption with equality test (IBEET) provides a feasible way for cloud server partitioning or searching on ciphertexts in the cloud. In that case, the server can judge if two different ciphertexts encrypt the same plaintexts or not. In response to threats posed by quantum computers, lattice-based IBEET schemes have been proposed to make cloud service post-quantum secure. However, those schemes are inefficient and can hardly meet the needs of resource-constrained devices. In this article, an efficient post-quantum IBEET scheme is introduced, which achieves testability by embedding the hash value of plaintext into testing trapdoor instead of encrypting it directly and doubling the size of ciphertext. We also prove that, with the Learning With Errors (LWE) problem assumption, the new scheme is one-way secure against selective identity and chosen ciphertext attacks (OW-sID-CCA) in quantum secure model. Furthermore, we evaluate the performance of the new construction and demonstrate its efficiency by showing that it only costs about half storage comparing with other lattice-based IBEET schemes. The execution time of encryption and decryption phrases in the new scheme reduce by 50%, while the computational cost in test algorithm keeps the same. Therefore, the new proposed IBEET is much more practical for working in post-quantum cloud computing scenarios.
Identity-based encryption with equality test (IBEET) provides a feasible way for cloud server partitioning or searching on ciphertexts in the cloud. In that case, the server can judge if two different ciphertexts encrypt the same plaintexts or not. In response to threats posed by quantum computers, lattice-based IBEET schemes have been proposed to make cloud service post-quantum secure. However, those schemes are inefficient and can hardly meet the needs of resource-constrained devices. In this article, an efficient post-quantum IBEET scheme is introduced, which achieves testability by embedding the hash value of plaintext into testing trapdoor instead of encrypting it directly and doubling the size of ciphertext. We also prove that, with the Learning With Errors (LWE) problem assumption, the new scheme is one-way secure against selective identity and chosen ciphertext attacks (OW-sID-CCA) in quantum secure model. Furthermore, we evaluate the performance of the new construction and demonstrate its efficiency by showing that it only costs about half storage comparing with other lattice-based IBEET schemes. The execution time of encryption and decryption phrases in the new scheme reduce by 50%, while the computational cost in test algorithm keeps the same. Therefore, the new proposed IBEET is much more practical for working in post-quantum cloud computing scenarios.
The rapid proliferation of cloud computing enables users to access computing resources and storage space over the internet, but it also presents challenges in terms of security and privacy. Ensuring the security and availability of data has become a focal point of current research when utilizing cloud computing for resource sharing, data storage, and querying. Public key encryption with equality test (PKEET) can perform an equality test on ciphertexts without decrypting them, even when those ciphertexts are encrypted under different public keys. That offers a practical approach to dividing up or searching for encrypted information directly. In order to deal with the threat raised by the rapid development of quantum computing, researchers have proposed post-quantum cryptography to guarantee the security of cloud services. However, it is challenging to implement these techniques efficiently. In this paper, a compact PKEET scheme is pro-posed. The new scheme does not encrypt the plaintext's hash value immediately but embeds it into the test trapdoor. We also demon-strated that our new construction is one-way secure under the quantum security model. With those efforts, our scheme can withstand the chosen ciphertext attacks as long as the learning with errors (LWE) assumption holds. Furthermore, we evaluated the new scheme's performance and found that it only costs approximately half the storage space compared with previous schemes. There is an almost half reduction in the computing cost throughout the encryption and decryption stages. In a nutshell, the new PKEET scheme is less costly, more compact, and applicable to cloud computing scenarios in a post-quantum environment.
Identity-based encryption with equality test (IBEET) is a variant of identity-based encryption (IBE), in which any user with trapdoors can check whether two ciphertexts are encryption of the same plaintext. Although several lattice-based IBEET schemes have been proposed, they have drawbacks in either security or efficiency. Specifically, most IBEET schemes only satisfy selective security, while public keys of adaptively secure schemes in the standard model consist of matrices whose numbers are linear in the security parameter. In other words, known lattice-based IBEET schemes perform poorly compared to the state-of-the-art lattice-based IBE schemes (without equality test). In this paper, we propose a semi-generic construction of CCA-secure lattice-based IBEET from a certain class of lattice-based IBE schemes. As a result, we obtain the first lattice-based IBEET schemes with adaptive security and CCA security in the standard model without sacrificing efficiency. This is because, our semi-generic construction can use several state-of-the-art lattice-based IBE schemes as underlying schemes, e.g. Yamada's IBE scheme (CRYPTO'17).
Public key encryption with equality test (PKEET) enables the testing whether two ciphertexts encrypt the same message. Identity-based encryption with equality test (IBEET) simplify the certificate management of PKEET, which leads to many potential applications such as in smart city applications or Wireless Body Area Networks. Lee et al. (ePrint 2016) proposed a generic construction of IBEET scheme in the standard model utilising a 3-level hierachy IBE together with a one-time signature scheme, which can be instantiated in lattice setting. Duong et al. (ProvSec 2019) proposed the first direct construction of IBEET in standard model from lattices. However, their scheme achieve CPA security only. In this paper, we improve the Duong et al.'s construction by proposing an IBEET in standard model which achieves CCA2 security and with smaller ciphertext and public key size.
Data is typically encrypted before transmission to a cloud server to safeguard user privacy. However, such encryption prevents the server from performing searches on the data, necessitating the introduction of novel cryptographic primitives, such as public key encryption with multi-ciphertext equality test (PKEMET). PKEMET allows the cloud server to execute a single equality test on multiple ciphertexts, determining if the underlying messages are identical disclosing any extra information. Ciphertext-policy attribute-based encryption (CP-ABE) facilitates secure and efficient data sharing in cloud computing environments by supporting fine-grained access control and flexible encryption. In this work, we integrate the concepts of PKEMET and CP-ABE, introducing a novel cryptographic primitive of CP-ABE with multi-ciphertext equality test (CP-ABEMET). We present the first quantum-resistant CP-ABEMET scheme based on the learning with errors (LWE) problem. This scheme enables the receiver to delegate the cloud server to perform a single equality test among multiple messages encrypted under distinct access policies. Importantly, during the multi-ciphertexts equality test, the server gains no knowledge of the encrypted messages. Furthermore, our proposed scheme not only achieves traditional indistinguishability against chosen plaintext attack (IND-CPA) and one-way against chosen plaintext attack (OW-CPA) security but is also proven to be number secure and resilient against collusion attacks. Finally, a comparative performance analysis between our CP-ABEMET and existing equality test schemes demonstrates that our approach is more practical, efficient, and secure.
Abstract Amid the rapid evolution of cloud computing, safeguarding data privacy has become a core priority for both academic and industrial communities. To protect user data from unauthorized access, vast volumes of sensitive information are encrypted before being transmitted to and stored on cloud platforms. Nevertheless, encryption inherently limits the platform’s ability to manipulate encrypted data, like direct search or matching on ciphertexts. Traditional Public Key Encryption with Equality Test (PKEET) schemes address this issue by enabling ciphertext equivalence verification without decryption, but they lack support for multi-ciphertext scenarios and fine-grained security. We propose a novel quantum-resistant Public Key Encryption with Multi-ciphertexts Equality Test (PKE-MET) scheme, the first to be constructed based on the Learning with Rounding (LWR) problem in lattice-based cryptography. We prove that the scheme achieves Chosen Ciphertext Attack (CCA2) security under the standard model, addressing the limitation of the existing Learning With Error (LWE)-based PKE-MET scheme which only reaches Chosen-Plaintext Attack (CPA) security. Compared with LWE-based solution, our scheme eliminates the need for complex discrete Gaussian sampling and adopts a smaller modulus. Theoretical analysis demonstrates that our proposed scheme exhibits good ciphertext scalability. Compared with the LWE-based solution, it requires only approximately 1/3 of the ciphertext storage. This reduces storage and communication resource consumption, thus lightening the operational load on cloud servers.
Identity-based encryption with equality test (IBE-ET) allows the detection of whether two different ciphertexts encrypt the same plaintext without decryption within the conventional identity-based encryption (IBE) model. This property ensures the confidentiality of communication and reduces the storage overhead of ciphertexts in cryptosystems. However, IBE-ET schemes based on traditional assumptions, such as discrete logarithm and integer factoring, are vulnerable to quantum algorithm attacks, highlighting the importance of designing lattice-based IBE-ET schemes. To address this, researchers have proposed several lattice-based IBE-ET schemes that utilize outdated lattice IBE paradigms and are inefficient in terms of parameter size. In this work, we construct a new lattice-based IBE-ET scheme using the most compact lattice IBE framework known to date. Our new proposal significantly improves the parameters compared to previous constructions. Furthermore, we provide a security reduction in the random oracle model, along with corresponding parameter selection and the comparison between our scheme and known constructions. The results imply that our scheme is efficient.