Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Applied Sciences

A CP-ABE Scheme Based on Lattice LWE and Its Security Analysis

Yunfei Yao, Huiyan Chen, Linzhi Shen, Ke Wang, Qingnan Wang

Published Jul 10, 2023• 5 citations
Publisher

Abstract

In recent years, the research on ciphertext-policy attribute-based encryption (CP-ABE) scheme design based on learning with errors (LWE) has been a challenging problem, and many researchers have made a lot of attempts at it. At EUROCRYPT 2021, Datta, Komargodski, and Waters proposed the first provably secure direct CP-ABE construction that supports NC1 circuit access structures. Improving on their work, we propose a CP-ABE scheme. Technically, we use the new lattice two-stage sampling technique of Lai, Liu, and Wang (EUROCRYPT 2021) in the key generation phase instead of the extended trapdoor sampling technique. In this way, we obtain a CP-ABE scheme, which is at least as secure as the original scheme under the same conditions, and has a shorter ciphertext; we provide an innovative design idea for designing CP-ABE schemes only based on LWE, although this is only a partial theoretical work.

DOI
10.3390/app13148043

Related papers

Lattice Ciphertext-Policy Attribute-Based encryption from ring-LWE

Tan Soo Fun, Azman Samsudin

The recent promising results on the hardness of lattice problems have inspired the construction of several Attribute-based Encryption (ABE) schemes from the quantum resistant perspective. However, these schemes are insufficient enough for supporting real-world applications due to inherent quadratic overhead problem in the use of Learning With Error (LWE). To solve this problem, this paper proposed a Ciphertext-Policy Attribute-Based Encryption (CP-ABE) scheme from a more lightweight ideal lattice classes- Ring-Learning with Errors (Ring-LWE), that further called as CP-ABER-LWEscheme. Compared to existing R-LWE based ABE scheme, the proposed CP-ABER-LWEis capable to handle a monotone access structure and enjoys collusion resistance properties. We exploited Linear Secret Scheme (LSSS) to express a monotone access structure. For resist to collusion attack, we applied the private key randomization technique to blind the user's private key. The proposed scheme CP-ABER-LWEis further proven to be secure under the Decision Ring-LWEd,q,χproblem in the selective set model.

International Symposium on Technology Management and Emerging Technologies (ISTMET)•Aug 1, 2015•33 citations

Cross-primitive comparison in CP-ABE

Lorenzo Gasparini, E. Onofri, Martina Palmucci +1 more

Abstract Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is a cornerstone technique for fine-grained access control in encrypted data sharing, with pairing-based schemes having established the de facto standard. However, their vulnerability to quantum attacks generated growing interest in alternatives rooted in quantum-secure primitives, with Learning With Errors (LWE) emerging as a prominent candidate. In this work, we present the first direct performance benchmark of lattice-versus pairings-based CP-ABE implementations. We compare two mature, widely adopted implementations – PALISADE-ABE’s LWE-based Zhang-Zhang scheme and OpenABE’s pairing-based Waters scheme – selected for their comparable development environments and assumptions. Our results highlight the practical trade-offs – both costs and benefits – of each paradigm, quantifying where lattice-based designs offer advantages and where they incur extra overhead. This comparison addresses a critical gap in the literature and provides direction for the design of future post-quantum secure systems.

Journal of Mathematical Cryptology•Jan 1, 2026•0 citations

Multi-Authority Ciphertext Policy Attribute-Based Encryption Scheme on Ideal Lattices

Zechao Liu, Zoe L. Jiang, Xu An Wang +2 more

Ciphertext policy attribute-based encryption (CP-ABE) is a promising cryptographic technology that provides fine-grained access control as well as data confidentiality. It enables one sender to encrypt the data for more receivers, and to specify a policy on who can decrypt the ciphertext using his/her attributes alone. However, most existing ABE schemes are constructed on bilinear maps and they cannot resist quantum attacks. In this paper, we propose a multi-authority CP-ABE (MA-CPABE) scheme on ideal lattices which is still secure in post-quantum era. On one hand, multiple attribute authorities are required when user's attributes cannot be managed by a central authority. On the other hand, compared with generic lattice, the ideal lattice has extra algebraic structure and can be used to construct more efficient cryptographic applications. By adding some virtual attributes for each authority, our scheme can support flexible threshold access policy. Security analysis shows that the proposed scheme is secure against chosen plaintext attack (CPA) in the standard model under the ring learning with errors (R-LWE) assumption.

IEEE International Symposium on Parallel and Distributed Processing with Applications (ISPA)•Dec 1, 2018•20 citations

Lattice Ciphertext Policy Attribute-based Encryption in the Standard Model

Yongtao Wang

A lattice ciphertext policy attribute based encryption (CP-ABE) scheme is presented, in which the ciphertext policy achieved is the AND-gates on multi-valued attributes. The previous construction with AND-gates on multi-valued attributes as ciphertext policy is based on bilinear paring technology. In this paper, inspired by the recent progress of lattice identity based encryption scheme, we achieve this access structure from lattice technology. There are two constructions given, and both of them can be viewed as an extension and generalization of the lattice identity based encryption schemes proposed by Agrawal et al., respectively. In addition, our constructions are shown to be secure under the learning with errors assumption in the standard model.

International journal of network security•Jan 1, 2014•41 citations

Correctness proof for a Ring-Learning-with-Errors Multi-Authority Ciphertext-Policy Attribute-Based Encryption Scheme

Jack Loughridge, Charuka Herath, Yogachandran Rahulamathavan +5 more

The advent of quantum computing poses a significant threat to traditional cryptographic algorithms, including RSA, Diffie-Hellman, and Elliptic Curve Cryptography, due to the capabilities of quantum algorithms like Shor’s algorithm. Post-quantum cryptography (PQC) has emerged to address these challenges, with lattice-based cryptography (LBC) being a prominent candidate. LBC, underpinned by hard mathematical problems like Learning with Errors (LWE) and Ring-LWE (RLWE), offers robust security against quantum and classical adversaries. In parallel, Ciphertext-Policy Attribute-Based Encryption (CPABE) has become a critical tool for enabling fine-grained access control in data-sharing scenarios, such as secure cloud storage and IoT. While existing CP-ABE implementations rely on bilinear pairings vulnerable to quantum attacks, lattice-based CPABE schemes provide a quantum-resistant alternative. Despite their potential, these schemes face challenges in computational efficiency, collusion resistance, and implementation correctness. Our contributions include a detailed mathematical breakdown of one of the state-of-the-art (SOTA) lattice-based CP-ABE schemes and a novel correctness proof for the same scheme.

IEEE International Conference on Distributed Computing Systems Workshops (ICDCSW)•Jul 21, 2025•0 citations

mR LWE -CP-ABE: A revocable CP-ABE for post-quantum cryptography

Marco Cianfriglia, E. Onofri, Marco Pedicini

Abstract We address the problem of user fast revocation in the lattice-based Ciphertext Policy Attribute-Based Encryption (CP-ABE) by extending the scheme originally introduced by Zhang and Zhang [Zhang J, Zhang Z. A ciphertext policy attribute-based encryption scheme without pairings . In: International Conference on Information Security and Cryptology. Springer; 2011. p. 324–40. doi: https://doi.org/10.1007/978-3-642-34704-7_23 .]. While a lot of work exists on the construction of revocable schemes for CP-ABE based on pairings, works based on lattices are not so common, and – to the best of our knowledge – we introduce the first server-aided revocation scheme in a lattice-based CP-ABE scheme, hence being embedded in a post-quantum secure environment. In particular, we rely on semi-trusted “mediators” to provide a multi-step decryption capable of handling mediation without re-encryption. We comment on the scheme and its application, and we provide performance experiments on a prototype implementation in the Attribute-Based Encryption spin-off library of Palisade to evaluate the overhead compared with the original scheme.

Journal of Mathematical Cryptology•Jan 1, 2024•3 citations
In recent years, the research on ciphertext-policy attribute-based encryption (CP-ABE) scheme design based on learning with errors (LWE) has been a challenging problem, and many researchers have made a lot of attempts at it. At EUROCRYPT 2021, Datta, Komargodski, and Waters proposed the first provably secure direct CP-ABE construction that supports NC1 circuit access structures. Improving on their work, we propose a CP-ABE scheme. Technically, we use the new lattice two-stage sampling technique of Lai, Liu, and Wang (EUROCRYPT 2021) in the key generation phase instead of the extended trapdoor sampling technique. In this way, we obtain a CP-ABE scheme, which is at least as secure as the original scheme under the same conditions, and has a shorter ciphertext; we provide an innovative design idea for designing CP-ABE schemes only based on LWE, although this is only a partial theoretical work.
The recent promising results on the hardness of lattice problems have inspired the construction of several Attribute-based Encryption (ABE) schemes from the quantum resistant perspective. However, these schemes are insufficient enough for supporting real-world applications due to inherent quadratic overhead problem in the use of Learning With Error (LWE). To solve this problem, this paper proposed a Ciphertext-Policy Attribute-Based Encryption (CP-ABE) scheme from a more lightweight ideal lattice classes- Ring-Learning with Errors (Ring-LWE), that further called as CP-ABER-LWEscheme. Compared to existing R-LWE based ABE scheme, the proposed CP-ABER-LWEis capable to handle a monotone access structure and enjoys collusion resistance properties. We exploited Linear Secret Scheme (LSSS) to express a monotone access structure. For resist to collusion attack, we applied the private key randomization technique to blind the user's private key. The proposed scheme CP-ABER-LWEis further proven to be secure under the Decision Ring-LWEd,q,χproblem in the selective set model.
Abstract Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is a cornerstone technique for fine-grained access control in encrypted data sharing, with pairing-based schemes having established the de facto standard. However, their vulnerability to quantum attacks generated growing interest in alternatives rooted in quantum-secure primitives, with Learning With Errors (LWE) emerging as a prominent candidate. In this work, we present the first direct performance benchmark of lattice-versus pairings-based CP-ABE implementations. We compare two mature, widely adopted implementations – PALISADE-ABE’s LWE-based Zhang-Zhang scheme and OpenABE’s pairing-based Waters scheme – selected for their comparable development environments and assumptions. Our results highlight the practical trade-offs – both costs and benefits – of each paradigm, quantifying where lattice-based designs offer advantages and where they incur extra overhead. This comparison addresses a critical gap in the literature and provides direction for the design of future post-quantum secure systems.
Ciphertext policy attribute-based encryption (CP-ABE) is a promising cryptographic technology that provides fine-grained access control as well as data confidentiality. It enables one sender to encrypt the data for more receivers, and to specify a policy on who can decrypt the ciphertext using his/her attributes alone. However, most existing ABE schemes are constructed on bilinear maps and they cannot resist quantum attacks. In this paper, we propose a multi-authority CP-ABE (MA-CPABE) scheme on ideal lattices which is still secure in post-quantum era. On one hand, multiple attribute authorities are required when user's attributes cannot be managed by a central authority. On the other hand, compared with generic lattice, the ideal lattice has extra algebraic structure and can be used to construct more efficient cryptographic applications. By adding some virtual attributes for each authority, our scheme can support flexible threshold access policy. Security analysis shows that the proposed scheme is secure against chosen plaintext attack (CPA) in the standard model under the ring learning with errors (R-LWE) assumption.
A lattice ciphertext policy attribute based encryption (CP-ABE) scheme is presented, in which the ciphertext policy achieved is the AND-gates on multi-valued attributes. The previous construction with AND-gates on multi-valued attributes as ciphertext policy is based on bilinear paring technology. In this paper, inspired by the recent progress of lattice identity based encryption scheme, we achieve this access structure from lattice technology. There are two constructions given, and both of them can be viewed as an extension and generalization of the lattice identity based encryption schemes proposed by Agrawal et al., respectively. In addition, our constructions are shown to be secure under the learning with errors assumption in the standard model.
The advent of quantum computing poses a significant threat to traditional cryptographic algorithms, including RSA, Diffie-Hellman, and Elliptic Curve Cryptography, due to the capabilities of quantum algorithms like Shor’s algorithm. Post-quantum cryptography (PQC) has emerged to address these challenges, with lattice-based cryptography (LBC) being a prominent candidate. LBC, underpinned by hard mathematical problems like Learning with Errors (LWE) and Ring-LWE (RLWE), offers robust security against quantum and classical adversaries. In parallel, Ciphertext-Policy Attribute-Based Encryption (CPABE) has become a critical tool for enabling fine-grained access control in data-sharing scenarios, such as secure cloud storage and IoT. While existing CP-ABE implementations rely on bilinear pairings vulnerable to quantum attacks, lattice-based CPABE schemes provide a quantum-resistant alternative. Despite their potential, these schemes face challenges in computational efficiency, collusion resistance, and implementation correctness. Our contributions include a detailed mathematical breakdown of one of the state-of-the-art (SOTA) lattice-based CP-ABE schemes and a novel correctness proof for the same scheme.
Abstract We address the problem of user fast revocation in the lattice-based Ciphertext Policy Attribute-Based Encryption (CP-ABE) by extending the scheme originally introduced by Zhang and Zhang [Zhang J, Zhang Z. A ciphertext policy attribute-based encryption scheme without pairings . In: International Conference on Information Security and Cryptology. Springer; 2011. p. 324–40. doi: https://doi.org/10.1007/978-3-642-34704-7_23 .]. While a lot of work exists on the construction of revocable schemes for CP-ABE based on pairings, works based on lattices are not so common, and – to the best of our knowledge – we introduce the first server-aided revocation scheme in a lattice-based CP-ABE scheme, hence being embedded in a post-quantum secure environment. In particular, we rely on semi-trusted “mediators” to provide a multi-step decryption capable of handling mediation without re-encryption. We comment on the scheme and its application, and we provide performance experiments on a prototype implementation in the Attribute-Based Encryption spin-off library of Palisade to evaluate the overhead compared with the original scheme.