© 2026 Aqora Quantum S.A.S.

Terms Privacy Legal Notice

International Conference on Imaging, Signal Processing and Communications (ICISPC)

A Hybrid Signcryption Scheme with Leakage-resilience Resistant to Side-channel Attacks*

Yuh‐Min Tseng, Ting-Chieh Ho, Sen‐Shan Huang, Tung‐Tso Tsai

Published Jul 19, 2024• 1 citation

Abstract

In public-key cryptography (PKC), a signcryption (SC) scheme is a significant primitive by combining both signature and encryption functionalities in one scheme while reducing computing time. Most SC schemes are based on single PKC setting, such as public-key infrastructure PKC (PKI-PKC), identity-based PKC (ID-PKC), certificate-based PKC (CB-PKC), and certificateless PKC (CL-PKC). For providing practical usage, numerous hybrid SC (HSC) schemes were also presented to suit for the sense that a sender and a recipient belong to different PKC settings (i.e., heterogeneous PKC settings). Recently, side-channel attacks have been realized to endanger the existing SC and HSC schemes. Indeed, the research of leakage-resilient cryptography resistant to side-channel attacks have attracted the attention of researchers. Indeed, several SC schemes with leakage resilience (SC-LR) based on single PKC setting have been proposed. However, little research focuses on HSC scheme with leakage-resilience (HSC-LR). Therefore, this paper aims to design the first HSC-LR from senders under a CB-PKC setting to recipients under a PKI-PKC setting, called as the HSC-LR-CBPKI scheme. We formally define a new framework and two security games of the HSC-LR-CBPKI scheme. Two security theorems are proved that the HSC-LR-CBPKI scheme possesses both signature and encryption functionalities (including unforgeability and confidentiality) under side-channel attacks. Finally, the proposed scheme is very efficient by performance analysis.

DOI: 10.1109/icispc63824.2024.00034

Related papers

Leakage-Resilient Certificate-Based Authenticated Key Exchange Protocol

Tung‐Tso Tsai, Sen‐Shan Huang, Yuh‐Min Tseng +2 more

Certificate-based public key cryptography (CB-PKC) removes the problem of certificate management in traditional public key systems and avoids the key escrow problem in identity-based public key systems. In the past, many authenticated key exchange (AKE) protocols based on CB-PKC systems, called CB-AKE, were proposed to be applied to secure communications between two remote participants. However, these existing CB-AKE protocols become insecure since attackers could compute and obtain the whole secret key from some partial leaked information of the secret key by side channel attacks. In this paper, our goal is to propose the$first$CB-AKE protocol with the property to resist side channel attacks, called leakage-resilient CB-AKE (LR-CB-AKE). The proposed LR-CB-AKE protocol is formally proven to be secure in the generic bilinear group (GBG) model under the discrete logarithm (DL) and computational Diffie-Hellman (CDH) assumptions.

IEEE Open Journal of the Computer Society•Jan 1, 2022•13 citations

A Leakage-Resilient Certificateless Authenticated Key Exchange Protocol Withstanding Side-Channel Attacks

Tsung-Che Hsieh, Yuh‐Min Tseng, Sen‐Shan Huang

Certificateless public-key cryptography has conquered both the certificate management problem in the traditional public-key cryptography and the key escrow problem in the ID-based public-key cryptography. Certificateless authenticated key exchange (CLAKE) protocol is an important primitive of the certificateless public-key cryptography. A CLAKE protocol is employed to provide both mutual authentication and establishing a session key between two participators. Indeed, all conventional public-key cryptographies have encountered a new kind of attack, named “side-channel attacks”. Fortunately, leakage-resilient cryptography is a flexible approach to withstand such attacks. However, the design of leakage-resilient CLAKE (LR-CLAKE) protocols is not studied. In the article, by extending the well-known extended-Canetti-Krawczyk (eCK) model, we present the security notions (adversary model) of LR-CLAKE protocols, called continual-leakage-resilient eCK (CLReCK) model. The first LR-CLAKE protocol withstanding side-channel attacks is proposed. By employing the proof technique of the generic bilinear group (GBG) model, we formally prove the security of our protocol in the CLReCK model.

IEEE Access•Jan 1, 2020•13 citations

Certificate-Based Encryption Resilient to Key Leakage.

Qihong Yu, Jiguo Li, Yichen Zhang +3 more

Certificate-based encryption (CBE) is an important class of public key encryption but the existing schemes are secure only under the premise that the decryption key (or private key) and master secret key are absolutely secret. In fact, a lot of side channel attacks and cold boot attacks can leak secret information of a cryptographic system. In this case, the security of the cryptographic system is destroyed, so a new model called leakage-resilient (LR) cryptography is introduced to solve this problem. While some traditional public key encryption and identity-based encryption with resilient-leakage schemes have been constructed, as far as we know, there is no leakage-resilient scheme in certificate-based cryptosystems. This paper puts forward the first certificate-based encryption scheme which can resist not only the decryption key leakage but also the master secret key leakage. Based on composite order bilinear group assumption, the security of the scheme is proved by using dual system encryption. The relative leakage rate of key is close to 1/3.

•Jan 1, 2015•0 citations

A Leakage-Resilient ID-Based Authenticated Key Exchange Protocol With a Revocation Mechanism

Tung‐Tso Tsai, Yun‐Hsin Chuang, Yuh‐Min Tseng +2 more

Establishing a session key (SSK) is very important for real-world deployment in open networks, which enables secure communication between remote parties. In the past, some authenticated key exchange (AKE) protocols have been proposed to generate a SSK, but the certificate management issue is inhered in the traditional public key infrastructure and must be addressed. To tackle this issue, the identity (ID)-based concept is added to AKE, called ID-AKE. Indeed, the security of the existing AKE/ID-AKE protocols is gaining increasing importance due to some new types of attacks, namely, side-channel attacks. In such attacks, adversaries could obtain secret keys’ partial information during the execution of cryptographic protocols (including AKE/ID-AKE). To withstand such attacks, many leakage-resilient ID-AKE (LR-ID-AKE) protocols resisting side-channel attacks have been proposed. However, these existing LR-ID-AKE protocols have no efficient solution to revoke compromised users. In this article, the first LR-ID-AKE protocol with an efficient revocation mechanism, called LR-RID-AKE, is proposed. The proposed protocol is not only as secure as existing LR-ID-AKE protocols but also able to efficiently revoke compromised users from the system.

IEEE Access•Jan 1, 2021•10 citations

Continuous Leakage-Resilient Identity-Based Encryption with Tight Security

Yanwei Zhou, Bo Yang, Hongxia Hou +3 more

Abstract In the actual applications, an adversary can break the security of cryptography scheme through various leakage attacks (e.g. side-channel attacks, cold-boot attacks, etc.), even the continuous leakage attacks. That is, a practical cryptography scheme must maintain its claimed security in the continuous leakage setting. However, the previous constructions on the leakage-resilient identity-based encryption (IBE) scheme could tolerate a leakage that is bounded, and cannot resist the continuous leakage attacks. In order to further achieve the better security, a novel method to build the continuous leakage-resilient IBE scheme with tight security is presented in this paper, and the scheme’s security is proved, in the standard model, based on a stronger security assumption that depends on the number of queries made by the adversary. In addition, our proposal has several advantages over previous such constructions, e.g. shorter public parameters, higher communication efficiency, tight security, etc.

The Computer Journal•Jan 3, 2019•10 citations

Heterogeneous hybrid signcryption for multi-message and multi-receiver

Shufen Niu, Niu Ling, Xiyan Yang +2 more

To achieve secure communication in heterogeneous cryptography systems, we present a heterogeneous hybrid signcryption scheme. The proposed scheme allows a sender in an identity-based cryptography system to send multi-message to multi-receiver in a certificateless cryptography system with different master keys. At the same time, all users are mapped to a distinct pseudo-identity for conditional identity privacy preservation. A trusted authority could trace the real identity when necessary. Compared with existing schemes, the proposed scheme is more practical for actual applications. In addition, the proposed scheme has indistinguishability against adaptive chosen ciphertext attacks and existential unforgeability against adaptive chosen message attacks under the random oracle model.

PLoS ONE•Sep 8, 2017•20 citations

In public-key cryptography (PKC), a signcryption (SC) scheme is a significant primitive by combining both signature and encryption functionalities in one scheme while reducing computing time. Most SC schemes are based on single PKC setting, such as public-key infrastructure PKC (PKI-PKC), identity-based PKC (ID-PKC), certificate-based PKC (CB-PKC), and certificateless PKC (CL-PKC). For providing practical usage, numerous hybrid SC (HSC) schemes were also presented to suit for the sense that a sender and a recipient belong to different PKC settings (i.e., heterogeneous PKC settings). Recently, side-channel attacks have been realized to endanger the existing SC and HSC schemes. Indeed, the research of leakage-resilient cryptography resistant to side-channel attacks have attracted the attention of researchers. Indeed, several SC schemes with leakage resilience (SC-LR) based on single PKC setting have been proposed. However, little research focuses on HSC scheme with leakage-resilience (HSC-LR). Therefore, this paper aims to design the first HSC-LR from senders under a CB-PKC setting to recipients under a PKI-PKC setting, called as the HSC-LR-CBPKI scheme. We formally define a new framework and two security games of the HSC-LR-CBPKI scheme. Two security theorems are proved that the HSC-LR-CBPKI scheme possesses both signature and encryption functionalities (including unforgeability and confidentiality) under side-channel attacks. Finally, the proposed scheme is very efficient by performance analysis.

Certificate-based public key cryptography (CB-PKC) removes the problem of certificate management in traditional public key systems and avoids the key escrow problem in identity-based public key systems. In the past, many authenticated key exchange (AKE) protocols based on CB-PKC systems, called CB-AKE, were proposed to be applied to secure communications between two remote participants. However, these existing CB-AKE protocols become insecure since attackers could compute and obtain the whole secret key from some partial leaked information of the secret key by side channel attacks. In this paper, our goal is to propose the

first

CB-AKE protocol with the property to resist side channel attacks, called leakage-resilient CB-AKE (LR-CB-AKE). The proposed LR-CB-AKE protocol is formally proven to be secure in the generic bilinear group (GBG) model under the discrete logarithm (DL) and computational Diffie-Hellman (CDH) assumptions.

Certificateless public-key cryptography has conquered both the certificate management problem in the traditional public-key cryptography and the key escrow problem in the ID-based public-key cryptography. Certificateless authenticated key exchange (CLAKE) protocol is an important primitive of the certificateless public-key cryptography. A CLAKE protocol is employed to provide both mutual authentication and establishing a session key between two participators. Indeed, all conventional public-key cryptographies have encountered a new kind of attack, named “side-channel attacks”. Fortunately, leakage-resilient cryptography is a flexible approach to withstand such attacks. However, the design of leakage-resilient CLAKE (LR-CLAKE) protocols is not studied. In the article, by extending the well-known extended-Canetti-Krawczyk (eCK) model, we present the security notions (adversary model) of LR-CLAKE protocols, called continual-leakage-resilient eCK (CLReCK) model. The first LR-CLAKE protocol withstanding side-channel attacks is proposed. By employing the proof technique of the generic bilinear group (GBG) model, we formally prove the security of our protocol in the CLReCK model.

Certificate-based encryption (CBE) is an important class of public key encryption but the existing schemes are secure only under the premise that the decryption key (or private key) and master secret key are absolutely secret. In fact, a lot of side channel attacks and cold boot attacks can leak secret information of a cryptographic system. In this case, the security of the cryptographic system is destroyed, so a new model called leakage-resilient (LR) cryptography is introduced to solve this problem. While some traditional public key encryption and identity-based encryption with resilient-leakage schemes have been constructed, as far as we know, there is no leakage-resilient scheme in certificate-based cryptosystems. This paper puts forward the first certificate-based encryption scheme which can resist not only the decryption key leakage but also the master secret key leakage. Based on composite order bilinear group assumption, the security of the scheme is proved by using dual system encryption. The relative leakage rate of key is close to 1/3.

Establishing a session key (SSK) is very important for real-world deployment in open networks, which enables secure communication between remote parties. In the past, some authenticated key exchange (AKE) protocols have been proposed to generate a SSK, but the certificate management issue is inhered in the traditional public key infrastructure and must be addressed. To tackle this issue, the identity (ID)-based concept is added to AKE, called ID-AKE. Indeed, the security of the existing AKE/ID-AKE protocols is gaining increasing importance due to some new types of attacks, namely, side-channel attacks. In such attacks, adversaries could obtain secret keys’ partial information during the execution of cryptographic protocols (including AKE/ID-AKE). To withstand such attacks, many leakage-resilient ID-AKE (LR-ID-AKE) protocols resisting side-channel attacks have been proposed. However, these existing LR-ID-AKE protocols have no efficient solution to revoke compromised users. In this article, the first LR-ID-AKE protocol with an efficient revocation mechanism, called LR-RID-AKE, is proposed. The proposed protocol is not only as secure as existing LR-ID-AKE protocols but also able to efficiently revoke compromised users from the system.

Abstract In the actual applications, an adversary can break the security of cryptography scheme through various leakage attacks (e.g. side-channel attacks, cold-boot attacks, etc.), even the continuous leakage attacks. That is, a practical cryptography scheme must maintain its claimed security in the continuous leakage setting. However, the previous constructions on the leakage-resilient identity-based encryption (IBE) scheme could tolerate a leakage that is bounded, and cannot resist the continuous leakage attacks. In order to further achieve the better security, a novel method to build the continuous leakage-resilient IBE scheme with tight security is presented in this paper, and the scheme’s security is proved, in the standard model, based on a stronger security assumption that depends on the number of queries made by the adversary. In addition, our proposal has several advantages over previous such constructions, e.g. shorter public parameters, higher communication efficiency, tight security, etc.

To achieve secure communication in heterogeneous cryptography systems, we present a heterogeneous hybrid signcryption scheme. The proposed scheme allows a sender in an identity-based cryptography system to send multi-message to multi-receiver in a certificateless cryptography system with different master keys. At the same time, all users are mapped to a distinct pseudo-identity for conditional identity privacy preservation. A trusted authority could trace the real identity when necessary. Compared with existing schemes, the proposed scheme is more practical for actual applications. In addition, the proposed scheme has indistinguishability against adaptive chosen ciphertext attacks and existential unforgeability against adaptive chosen message attacks under the random oracle model.