Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Computer Information Science and Application Technology (CISAT)

Revocable multi-authority attribute-based encryption from lattice in cloud storage

Wei Wen, Rui Jiang

Published Oct 11, 2023• 0 citations
Publisher

Abstract

With the rapid development of quantum computing technology, data sharing systems in cloud storage may suffer from quantum computing attacks. Recently, many researchers have proposed encryption schemes to achieve quantum attack resistance and fine-grained data access control. However, single point of failure and secure attribute revocation are two critical problems for quantum-resistant encryption scheme in cloud storage environments. In order to deal with these problems, in this paper, we propose a revocable multi-authority attribute-based encryption from lattice (RMA-ABE-L) in cloud storage. Firstly, RMA-ABE-L scheme can achieve fine-grained data access control with quantum computing attack resistance. We design efficient anti-quantum algorithms based on R-LWE problem and merge them with ciphertext-policy attribute-based encryption (CP-ABE) structure. Secondly, RMA-ABE-L scheme can solve the single point of failure problem. We design the multi-authority structure to so that the compromise of some authorities does not affect the functioning of the whole data sharing system. Moreover, RMA-ABE-L scheme can realize secure attribute revocation. We design a secure attribute revocation mechanism and set special identity construction. The performance analysis shows that RMA-ABE-L scheme is more efficient than other related schemes.

DOI
10.1117/12.3004058

Related papers

Multi-Authority Ciphertext Policy Attribute-Based Encryption Scheme on Ideal Lattices

Zechao Liu, Zoe L. Jiang, Xu An Wang +2 more

Ciphertext policy attribute-based encryption (CP-ABE) is a promising cryptographic technology that provides fine-grained access control as well as data confidentiality. It enables one sender to encrypt the data for more receivers, and to specify a policy on who can decrypt the ciphertext using his/her attributes alone. However, most existing ABE schemes are constructed on bilinear maps and they cannot resist quantum attacks. In this paper, we propose a multi-authority CP-ABE (MA-CPABE) scheme on ideal lattices which is still secure in post-quantum era. On one hand, multiple attribute authorities are required when user's attributes cannot be managed by a central authority. On the other hand, compared with generic lattice, the ideal lattice has extra algebraic structure and can be used to construct more efficient cryptographic applications. By adding some virtual attributes for each authority, our scheme can support flexible threshold access policy. Security analysis shows that the proposed scheme is secure against chosen plaintext attack (CPA) in the standard model under the ring learning with errors (R-LWE) assumption.

IEEE International Symposium on Parallel and Distributed Processing with Applications (ISPA)•Dec 1, 2018•20 citations

Revocable-Attribute-Based Encryption with En-DKER from Lattices

Qi Wang, Juyan Li, Zhedong Wang +1 more

Cloud computing offers abundant computing resources and scalable storage, but data leakage in the cloud storage environment is a common and critical concern due to inadequate protection measures. Revocable-attribute-based encryption (RABE) is introduced as an advanced form of identity-based encryption (IBE), which encrypts sensitive data while providing fine-grained access control and an effective user revocation mechanism. However, most existing RABE schemes are not resistant to quantum attacks and are limited in their application scenarios due to the revocation model. In this paper, we propose a RABE scheme constructed from lattices. Our scheme has several advantages, including a near-zero periodic workload for the key generation center (KGC), ensuring scalability as the number of users increases. Additionally, the encryptor is relieved from managing a revocation list. Moreover, our scheme guarantees the confidentiality and privacy of other ciphertexts even if the decryption key for a specific period is compromised. We validated the correctness of our scheme and demonstrated its security under the assumption of learning with errors (LWE), which is widely believed to be resistant to quantum attacks. Finally, we provide an application example of our RABE scheme in the electronic healthcare scenario.

Mathematics•Dec 17, 2023•3 citations

A structured review of lattice based attribute based encryption methods for post quantum security

Saima Hasib, Akhtar Rasool, Manasi Gyanchandani +2 more

The rapid advancement of quantum computing threatens to undermine classical cryptographic primitives, creating an urgent need for post-quantum secure alternatives. Lattice-based Attribute-Based Encryption (ABE) has emerged as a promising direction, combining fine-grained access control with quantum resistance derived from lattice assumptions such as Learning With Errors (LWE) and Ring-LWE. This paper presents a systematic literature review of lattice-based ABE schemes published between 2022 and 2025, following the PRISMA methodology to ensure a rigorous and transparent study selection process. From an initial corpus of more than 7,800 studies retrieved across IEEE Xplore, SpringerLink, Elsevier ScienceDirect, MDPI, and Google Scholar, 1,236 studies were screened, resulting in 90 works selected for in-depth qualitative and quantitative synthesis. The review analyzes the evolution of lattice-based ABE in terms of mathematical foundations, security models, performance characteristics, and application domains. Particular emphasis is placed on emerging use cases in cloud computing, the Internet of Things (IoT), healthcare, financial systems, and government compliance, each evaluated against requirements such as revocation support, lightweight design, searchability, and multi-authority governance. Quantitative synthesis reveals uneven feature coverage across the literature: searchability is supported in 45.6% of schemes and lightweight constructions in 36.7%, whereas policy hiding (16.7%) and revocation (22.2%) remain comparatively underexplored. Performance trends indicate ciphertext sizes averaging 5.8 kB per attribute, with only 12% of schemes achieving compact representations below 2 kB. Moreover, fewer than 36% of surveyed constructions provide IND-CCA security, highlighting persistent challenges in achieving robustness against adaptive adversaries. By integrating structured research questions with quantitative trend analysis, this study offers both descriptive and evidence-backed insights into the current state of lattice-based ABE. The findings identify critical gaps in efficiency, security guarantees, and standardization, and inform a forward-looking research roadmap emphasizing lightweight revocation mechanisms, efficient policy hiding, stronger IND-CCA security models, and the need for standardized benchmarking frameworks. This survey thus serves as a comprehensive reference for researchers and practitioners working on post-quantum secure access control systems, particularly in privacy-sensitive domains such as healthcare.

Discover Computing•Mar 27, 2026•2 citations

Quantum-Resistant Multi-Feature Attribute-Based Proxy Re-Encryption Scheme for Cloud Services

Jinqiu Hou, Changgen Peng, Weijie Tan +1 more

Cloud-based services have powerful storage functions and can provide accurate computation. However, the question of how to guarantee cloud-based services access control and achieve data sharing security has always been a research highlight. Although the attribute-based proxy re-encryption (ABPRE) schemes based on number theory can solve this problem, it is still difficult to resist quantum attacks and have limited expression capabilities. To address these issues, we present a novel linear secret sharing schemes (LSSS) matrix-based ABPRE scheme with the fine-grained policy on the lattice in the research. Additionally, to detect the activities of illegal proxies, homomorphic signature (HS) technology is introduced to realize the verifiability of re-encryption. Moreover, the non-interactivity, unidirectionality, proxy transparency, multi-use, and anti-quantum attack characteristics of our system are all advantageous. Besides, it can efficiently prevent the loss of processing power brought on by repetitive authorisation and can enable precise and safe data sharing in the cloud. Furthermore, under the standard model, the proposed learning with errors (LWE)-based scheme was proven to be IND-sCPA secure.

Computer Modeling in Engineering & Sciences•Sep 19, 2023•5 citations

Lattice-based ABE with multi-ciphertext equality test in cloud computing

Mengdi Zhao, Huiyan Chen, Yunfei Yao +1 more

Data is typically encrypted before transmission to a cloud server to safeguard user privacy. However, such encryption prevents the server from performing searches on the data, necessitating the introduction of novel cryptographic primitives, such as public key encryption with multi-ciphertext equality test (PKEMET). PKEMET allows the cloud server to execute a single equality test on multiple ciphertexts, determining if the underlying messages are identical disclosing any extra information. Ciphertext-policy attribute-based encryption (CP-ABE) facilitates secure and efficient data sharing in cloud computing environments by supporting fine-grained access control and flexible encryption. In this work, we integrate the concepts of PKEMET and CP-ABE, introducing a novel cryptographic primitive of CP-ABE with multi-ciphertext equality test (CP-ABEMET). We present the first quantum-resistant CP-ABEMET scheme based on the learning with errors (LWE) problem. This scheme enables the receiver to delegate the cloud server to perform a single equality test among multiple messages encrypted under distinct access policies. Importantly, during the multi-ciphertexts equality test, the server gains no knowledge of the encrypted messages. Furthermore, our proposed scheme not only achieves traditional indistinguishability against chosen plaintext attack (IND-CPA) and one-way against chosen plaintext attack (OW-CPA) security but is also proven to be number secure and resilient against collusion attacks. Finally, a comparative performance analysis between our CP-ABEMET and existing equality test schemes demonstrates that our approach is more practical, efficient, and secure.

Journal of King Saud University - Computer and Information Sciences•May 1, 2025•2 citations

An Efficient and Secure Post-Quantum Multi-Authority Ciphertext-Policy Attribute-Based Encryption Method Using Lattice

Prithwi Bagchi, Basudeb Bera, Raj Maheshwari +3 more

This article deals with designing an efficient post-quantum lattice based encryption scheme that relies on the multi-authority Ciphertext-Policy Attribute-Based Encryption (CP-ABE). The security of the proposed scheme is based on the hardness of the ring learning with errors (RLWE) problem. The construction of the proposed scheme is done using the Shamir's threshold secret sharing along with the Lagrange interpolation during the key generation and decryption processes in order to achieve the segmentation and restoration of private keys. A comparative study with the existing state of art schemes has been performed to show the feasibility and efficiency of the proposed scheme. Furthermore, experiments on the proposed scheme have been conducted to illustrate the computational time required during the key generation, encryption and decryption processes.

IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)•May 20, 2023•17 citations
With the rapid development of quantum computing technology, data sharing systems in cloud storage may suffer from quantum computing attacks. Recently, many researchers have proposed encryption schemes to achieve quantum attack resistance and fine-grained data access control. However, single point of failure and secure attribute revocation are two critical problems for quantum-resistant encryption scheme in cloud storage environments. In order to deal with these problems, in this paper, we propose a revocable multi-authority attribute-based encryption from lattice (RMA-ABE-L) in cloud storage. Firstly, RMA-ABE-L scheme can achieve fine-grained data access control with quantum computing attack resistance. We design efficient anti-quantum algorithms based on R-LWE problem and merge them with ciphertext-policy attribute-based encryption (CP-ABE) structure. Secondly, RMA-ABE-L scheme can solve the single point of failure problem. We design the multi-authority structure to so that the compromise of some authorities does not affect the functioning of the whole data sharing system. Moreover, RMA-ABE-L scheme can realize secure attribute revocation. We design a secure attribute revocation mechanism and set special identity construction. The performance analysis shows that RMA-ABE-L scheme is more efficient than other related schemes.
Ciphertext policy attribute-based encryption (CP-ABE) is a promising cryptographic technology that provides fine-grained access control as well as data confidentiality. It enables one sender to encrypt the data for more receivers, and to specify a policy on who can decrypt the ciphertext using his/her attributes alone. However, most existing ABE schemes are constructed on bilinear maps and they cannot resist quantum attacks. In this paper, we propose a multi-authority CP-ABE (MA-CPABE) scheme on ideal lattices which is still secure in post-quantum era. On one hand, multiple attribute authorities are required when user's attributes cannot be managed by a central authority. On the other hand, compared with generic lattice, the ideal lattice has extra algebraic structure and can be used to construct more efficient cryptographic applications. By adding some virtual attributes for each authority, our scheme can support flexible threshold access policy. Security analysis shows that the proposed scheme is secure against chosen plaintext attack (CPA) in the standard model under the ring learning with errors (R-LWE) assumption.
Cloud computing offers abundant computing resources and scalable storage, but data leakage in the cloud storage environment is a common and critical concern due to inadequate protection measures. Revocable-attribute-based encryption (RABE) is introduced as an advanced form of identity-based encryption (IBE), which encrypts sensitive data while providing fine-grained access control and an effective user revocation mechanism. However, most existing RABE schemes are not resistant to quantum attacks and are limited in their application scenarios due to the revocation model. In this paper, we propose a RABE scheme constructed from lattices. Our scheme has several advantages, including a near-zero periodic workload for the key generation center (KGC), ensuring scalability as the number of users increases. Additionally, the encryptor is relieved from managing a revocation list. Moreover, our scheme guarantees the confidentiality and privacy of other ciphertexts even if the decryption key for a specific period is compromised. We validated the correctness of our scheme and demonstrated its security under the assumption of learning with errors (LWE), which is widely believed to be resistant to quantum attacks. Finally, we provide an application example of our RABE scheme in the electronic healthcare scenario.
The rapid advancement of quantum computing threatens to undermine classical cryptographic primitives, creating an urgent need for post-quantum secure alternatives. Lattice-based Attribute-Based Encryption (ABE) has emerged as a promising direction, combining fine-grained access control with quantum resistance derived from lattice assumptions such as Learning With Errors (LWE) and Ring-LWE. This paper presents a systematic literature review of lattice-based ABE schemes published between 2022 and 2025, following the PRISMA methodology to ensure a rigorous and transparent study selection process. From an initial corpus of more than 7,800 studies retrieved across IEEE Xplore, SpringerLink, Elsevier ScienceDirect, MDPI, and Google Scholar, 1,236 studies were screened, resulting in 90 works selected for in-depth qualitative and quantitative synthesis. The review analyzes the evolution of lattice-based ABE in terms of mathematical foundations, security models, performance characteristics, and application domains. Particular emphasis is placed on emerging use cases in cloud computing, the Internet of Things (IoT), healthcare, financial systems, and government compliance, each evaluated against requirements such as revocation support, lightweight design, searchability, and multi-authority governance. Quantitative synthesis reveals uneven feature coverage across the literature: searchability is supported in 45.6% of schemes and lightweight constructions in 36.7%, whereas policy hiding (16.7%) and revocation (22.2%) remain comparatively underexplored. Performance trends indicate ciphertext sizes averaging 5.8 kB per attribute, with only 12% of schemes achieving compact representations below 2 kB. Moreover, fewer than 36% of surveyed constructions provide IND-CCA security, highlighting persistent challenges in achieving robustness against adaptive adversaries. By integrating structured research questions with quantitative trend analysis, this study offers both descriptive and evidence-backed insights into the current state of lattice-based ABE. The findings identify critical gaps in efficiency, security guarantees, and standardization, and inform a forward-looking research roadmap emphasizing lightweight revocation mechanisms, efficient policy hiding, stronger IND-CCA security models, and the need for standardized benchmarking frameworks. This survey thus serves as a comprehensive reference for researchers and practitioners working on post-quantum secure access control systems, particularly in privacy-sensitive domains such as healthcare.
Cloud-based services have powerful storage functions and can provide accurate computation. However, the question of how to guarantee cloud-based services access control and achieve data sharing security has always been a research highlight. Although the attribute-based proxy re-encryption (ABPRE) schemes based on number theory can solve this problem, it is still difficult to resist quantum attacks and have limited expression capabilities. To address these issues, we present a novel linear secret sharing schemes (LSSS) matrix-based ABPRE scheme with the fine-grained policy on the lattice in the research. Additionally, to detect the activities of illegal proxies, homomorphic signature (HS) technology is introduced to realize the verifiability of re-encryption. Moreover, the non-interactivity, unidirectionality, proxy transparency, multi-use, and anti-quantum attack characteristics of our system are all advantageous. Besides, it can efficiently prevent the loss of processing power brought on by repetitive authorisation and can enable precise and safe data sharing in the cloud. Furthermore, under the standard model, the proposed learning with errors (LWE)-based scheme was proven to be IND-sCPA secure.
Data is typically encrypted before transmission to a cloud server to safeguard user privacy. However, such encryption prevents the server from performing searches on the data, necessitating the introduction of novel cryptographic primitives, such as public key encryption with multi-ciphertext equality test (PKEMET). PKEMET allows the cloud server to execute a single equality test on multiple ciphertexts, determining if the underlying messages are identical disclosing any extra information. Ciphertext-policy attribute-based encryption (CP-ABE) facilitates secure and efficient data sharing in cloud computing environments by supporting fine-grained access control and flexible encryption. In this work, we integrate the concepts of PKEMET and CP-ABE, introducing a novel cryptographic primitive of CP-ABE with multi-ciphertext equality test (CP-ABEMET). We present the first quantum-resistant CP-ABEMET scheme based on the learning with errors (LWE) problem. This scheme enables the receiver to delegate the cloud server to perform a single equality test among multiple messages encrypted under distinct access policies. Importantly, during the multi-ciphertexts equality test, the server gains no knowledge of the encrypted messages. Furthermore, our proposed scheme not only achieves traditional indistinguishability against chosen plaintext attack (IND-CPA) and one-way against chosen plaintext attack (OW-CPA) security but is also proven to be number secure and resilient against collusion attacks. Finally, a comparative performance analysis between our CP-ABEMET and existing equality test schemes demonstrates that our approach is more practical, efficient, and secure.
This article deals with designing an efficient post-quantum lattice based encryption scheme that relies on the multi-authority Ciphertext-Policy Attribute-Based Encryption (CP-ABE). The security of the proposed scheme is based on the hardness of the ring learning with errors (RLWE) problem. The construction of the proposed scheme is done using the Shamir's threshold secret sharing along with the Lagrange interpolation during the key generation and decryption processes in order to achieve the segmentation and restoration of private keys. A comparative study with the existing state of art schemes has been performed to show the feasibility and efficiency of the proposed scheme. Furthermore, experiments on the proposed scheme have been conducted to illustrate the computational time required during the key generation, encryption and decryption processes.