Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IACR Communications in Cryptology

Post-Quantum Access Control with Application to Secure Data Retrieval

Behzad Abdolmaleki, Hannes Blümel, Tianxiang Dai, Giacomo Fenzi, Homa Khajeh, Stefan Köpsell, Maryam Zarezadeh

Published Oct 6, 2025• 0 citations
Publisher

Abstract

Servan-Schreiber et al. [IEEE S& P, 2023] presented a new notion called private access control lists (PACL) for function secret sharing (FSS), where the FSS evaluators can ensure that the FSS dealer is authorized to share the given function. Their construction relies on costly non-interactive secret-shared proofs and is not secure in the post-quantum setting. We give a construction of PACL from publicly verifiable secret sharing (PVSS) under the short integer solution (SIS) problem. Our construction adapts the Gentry et al.'s scheme [EUROCRYPT, 2022] for the post-quantum setting based on the learning with error (LWE) assumption aimed at ensuring that database access control policies are enforced by FSS evaluators, who verify that the FSS dealer is authorized to share the specified database query function. The benchmarks of our PACL show a trade-off between proving and verification efficiency, making the optimal choice dependent on application requirements. This construction has many applications for access control by applying FSS. We also present a secure data retrieval scheme using DPF-PACL for access control, which complements the PACL framework while providing independent utility.

DOI
10.62056/akmpxrdja

Related papers

A structured review of lattice based attribute based encryption methods for post quantum security

Saima Hasib, Akhtar Rasool, Manasi Gyanchandani +2 more

The rapid advancement of quantum computing threatens to undermine classical cryptographic primitives, creating an urgent need for post-quantum secure alternatives. Lattice-based Attribute-Based Encryption (ABE) has emerged as a promising direction, combining fine-grained access control with quantum resistance derived from lattice assumptions such as Learning With Errors (LWE) and Ring-LWE. This paper presents a systematic literature review of lattice-based ABE schemes published between 2022 and 2025, following the PRISMA methodology to ensure a rigorous and transparent study selection process. From an initial corpus of more than 7,800 studies retrieved across IEEE Xplore, SpringerLink, Elsevier ScienceDirect, MDPI, and Google Scholar, 1,236 studies were screened, resulting in 90 works selected for in-depth qualitative and quantitative synthesis. The review analyzes the evolution of lattice-based ABE in terms of mathematical foundations, security models, performance characteristics, and application domains. Particular emphasis is placed on emerging use cases in cloud computing, the Internet of Things (IoT), healthcare, financial systems, and government compliance, each evaluated against requirements such as revocation support, lightweight design, searchability, and multi-authority governance. Quantitative synthesis reveals uneven feature coverage across the literature: searchability is supported in 45.6% of schemes and lightweight constructions in 36.7%, whereas policy hiding (16.7%) and revocation (22.2%) remain comparatively underexplored. Performance trends indicate ciphertext sizes averaging 5.8 kB per attribute, with only 12% of schemes achieving compact representations below 2 kB. Moreover, fewer than 36% of surveyed constructions provide IND-CCA security, highlighting persistent challenges in achieving robustness against adaptive adversaries. By integrating structured research questions with quantitative trend analysis, this study offers both descriptive and evidence-backed insights into the current state of lattice-based ABE. The findings identify critical gaps in efficiency, security guarantees, and standardization, and inform a forward-looking research roadmap emphasizing lightweight revocation mechanisms, efficient policy hiding, stronger IND-CCA security models, and the need for standardized benchmarking frameworks. This survey thus serves as a comprehensive reference for researchers and practitioners working on post-quantum secure access control systems, particularly in privacy-sensitive domains such as healthcare.

Discover Computing•Mar 27, 2026•2 citations

Quantum private information retrieval with lattice-based access authentication

Hao Jia, Yu‐Guang Yang, Guang‐Bao Xu +4 more

Quantum Information Processing•May 21, 2025•4 citations

Practical Post-Quantum Secure Publicly Verifiable Secret Sharing and Applications

Aniket Kate, Pratyay Mukherjee, Hamza Saleem +2 more

We present a new framework for constructing practically efficient publicly verifiable secret sharing (PVSS) with non-interactive dealers , in that the dealer may go offline after sending a single message, and is not involved in the share verification process. We use identity-based encryption (IBE) and commitments as the main ingredients and avoid expensive zero-knowledge proofs. By instantiating them with post-quantum secure schemes, a lattice-based IBE and a hash-based commitment, we obtain our first construction: a post-quantum secure PVSS with non-interactive dealers that outperforms the prior lattice-based practical construction by Gentry et al. [Eurocrypt 2022]. However, to enable the aggregation of PVSS transcripts (which facilitates many additional applications such as secure voting), we propose our second construction by replacing hash-based commitments with Pedersen's homomorphic commitments. While this does not achieve full-fledged post-quantum security (as Pedersen's scheme is not quantum safe), it still provides privacy against a post-quantum adversary. We prove the security of this construction in a new model, which we call long-lasting security. This model guarantees that the protocol is secure in the present (pre-quantum era) while maintaining privacy in the long term (post-quantum era). This new model is of independent interest for constructing efficient schemes that are resilient to the harvest-now-decrypt-later line of attacks. In this model, we propose a blockchain-compatible secure voting scheme using our PVSS scheme. Our PVSS schemes demonstrate practical efficiency: our post-quantum PVSS shares a secret among 1024 receivers in 667 ms and verifies the dealing in < 5 ms, and communicates 4.4MB, overall whereas the state of the art [Gentry et al., Eurocrypt 2022] communicates 251MB and requires 2060s for dealing the secret.

ACM Conference on Post-Quantum and Quantum-based Security•Oct 26, 2026•0 citations

Publicly Verifiable Private Information Retrieval Protocols Based on Function Secret Sharing

Lin Zhu, Lingwei Kong, Xin Ning +2 more

arXiv:2509.13684•Lecture notes in computer science•Jan 1, 2026•0 citations

Towards Efficient Information-Theoretic Function Secret Sharing

Wen Ming Li, Liang Feng Zhang

A (t, r)-function secret sharing ((t, r)-FSS) scheme allows a dealer to secret-share a functionf among r parties as r secret keys k1, ... , krsuch that for any input x the parties can compute r output shares that allow the reconstruction of f (x) but any ≤ t of the parties cannot learn any information aboutf. FSS schemes for point functions have been constructed under the name of distributed point functions (DPFs). The existing DPFs are computationally secure and based on the existence of PRGs or OWFs. As a result, the protocols where DPFs work as building blocks are computationally secure as well. In this paper, we study information-theoretically secure (t, r)-FSS (called (t, r)-itFSS) and propose a generic transformation from information-theoretic private information retrieval (PIR) schemes to itFSS schemes for point functions. We measure the efficiency of itFSS with its communication complexity, which can be defined as the total length of the secret keys and the output shares, maximized over the choices off and x. By instantiating the generic transformation, we obtain (t, r)-itFSS schemes for a variety of choices of (t, r), which have sublinear (in the functions' domain size) communication complexity. How to make sure that the parties' shares of f (x) do not reveal more information than what needed to computef(x) is an interesting problem. An itFSS with this property is called function-private. In this paper, we also define a parameter called the mutual rate of itFSS in order to measure the amount of information that will be leaked by the parties' output shares. We calculate the mutual rates for several specific itFSS schemes. We also define computational function privacy and propose a 2-party itFSS scheme with computational function privacy.

IEEE Access•Jan 1, 2020•3 citations

Authenticated sublinear quantum private information retrieval

Fengxia Liu, Zhiyong Zheng, Oleksiy Zhedanov +5 more

arXiv:2504.04041•Quantum Information Processing•Dec 15, 2025•0 citations
Servan-Schreiber et al. [IEEE S& P, 2023] presented a new notion called private access control lists (PACL) for function secret sharing (FSS), where the FSS evaluators can ensure that the FSS dealer is authorized to share the given function. Their construction relies on costly non-interactive secret-shared proofs and is not secure in the post-quantum setting. We give a construction of PACL from publicly verifiable secret sharing (PVSS) under the short integer solution (SIS) problem. Our construction adapts the Gentry et al.'s scheme [EUROCRYPT, 2022] for the post-quantum setting based on the learning with error (LWE) assumption aimed at ensuring that database access control policies are enforced by FSS evaluators, who verify that the FSS dealer is authorized to share the specified database query function. The benchmarks of our PACL show a trade-off between proving and verification efficiency, making the optimal choice dependent on application requirements. This construction has many applications for access control by applying FSS. We also present a secure data retrieval scheme using DPF-PACL for access control, which complements the PACL framework while providing independent utility.
The rapid advancement of quantum computing threatens to undermine classical cryptographic primitives, creating an urgent need for post-quantum secure alternatives. Lattice-based Attribute-Based Encryption (ABE) has emerged as a promising direction, combining fine-grained access control with quantum resistance derived from lattice assumptions such as Learning With Errors (LWE) and Ring-LWE. This paper presents a systematic literature review of lattice-based ABE schemes published between 2022 and 2025, following the PRISMA methodology to ensure a rigorous and transparent study selection process. From an initial corpus of more than 7,800 studies retrieved across IEEE Xplore, SpringerLink, Elsevier ScienceDirect, MDPI, and Google Scholar, 1,236 studies were screened, resulting in 90 works selected for in-depth qualitative and quantitative synthesis. The review analyzes the evolution of lattice-based ABE in terms of mathematical foundations, security models, performance characteristics, and application domains. Particular emphasis is placed on emerging use cases in cloud computing, the Internet of Things (IoT), healthcare, financial systems, and government compliance, each evaluated against requirements such as revocation support, lightweight design, searchability, and multi-authority governance. Quantitative synthesis reveals uneven feature coverage across the literature: searchability is supported in 45.6% of schemes and lightweight constructions in 36.7%, whereas policy hiding (16.7%) and revocation (22.2%) remain comparatively underexplored. Performance trends indicate ciphertext sizes averaging 5.8 kB per attribute, with only 12% of schemes achieving compact representations below 2 kB. Moreover, fewer than 36% of surveyed constructions provide IND-CCA security, highlighting persistent challenges in achieving robustness against adaptive adversaries. By integrating structured research questions with quantitative trend analysis, this study offers both descriptive and evidence-backed insights into the current state of lattice-based ABE. The findings identify critical gaps in efficiency, security guarantees, and standardization, and inform a forward-looking research roadmap emphasizing lightweight revocation mechanisms, efficient policy hiding, stronger IND-CCA security models, and the need for standardized benchmarking frameworks. This survey thus serves as a comprehensive reference for researchers and practitioners working on post-quantum secure access control systems, particularly in privacy-sensitive domains such as healthcare.
We present a new framework for constructing practically efficient publicly verifiable secret sharing (PVSS) with non-interactive dealers , in that the dealer may go offline after sending a single message, and is not involved in the share verification process. We use identity-based encryption (IBE) and commitments as the main ingredients and avoid expensive zero-knowledge proofs. By instantiating them with post-quantum secure schemes, a lattice-based IBE and a hash-based commitment, we obtain our first construction: a post-quantum secure PVSS with non-interactive dealers that outperforms the prior lattice-based practical construction by Gentry et al. [Eurocrypt 2022]. However, to enable the aggregation of PVSS transcripts (which facilitates many additional applications such as secure voting), we propose our second construction by replacing hash-based commitments with Pedersen's homomorphic commitments. While this does not achieve full-fledged post-quantum security (as Pedersen's scheme is not quantum safe), it still provides privacy against a post-quantum adversary. We prove the security of this construction in a new model, which we call long-lasting security. This model guarantees that the protocol is secure in the present (pre-quantum era) while maintaining privacy in the long term (post-quantum era). This new model is of independent interest for constructing efficient schemes that are resilient to the harvest-now-decrypt-later line of attacks. In this model, we propose a blockchain-compatible secure voting scheme using our PVSS scheme. Our PVSS schemes demonstrate practical efficiency: our post-quantum PVSS shares a secret among 1024 receivers in 667 ms and verifies the dealing in < 5 ms, and communicates 4.4MB, overall whereas the state of the art [Gentry et al., Eurocrypt 2022] communicates 251MB and requires 2060s for dealing the secret.
A (t, r)-function secret sharing ((t, r)-FSS) scheme allows a dealer to secret-share a functionf among r parties as r secret keys k1, ... , krsuch that for any input x the parties can compute r output shares that allow the reconstruction of f (x) but any ≤ t of the parties cannot learn any information aboutf. FSS schemes for point functions have been constructed under the name of distributed point functions (DPFs). The existing DPFs are computationally secure and based on the existence of PRGs or OWFs. As a result, the protocols where DPFs work as building blocks are computationally secure as well. In this paper, we study information-theoretically secure (t, r)-FSS (called (t, r)-itFSS) and propose a generic transformation from information-theoretic private information retrieval (PIR) schemes to itFSS schemes for point functions. We measure the efficiency of itFSS with its communication complexity, which can be defined as the total length of the secret keys and the output shares, maximized over the choices off and x. By instantiating the generic transformation, we obtain (t, r)-itFSS schemes for a variety of choices of (t, r), which have sublinear (in the functions' domain size) communication complexity. How to make sure that the parties' shares of f (x) do not reveal more information than what needed to computef(x) is an interesting problem. An itFSS with this property is called function-private. In this paper, we also define a parameter called the mutual rate of itFSS in order to measure the amount of information that will be leaked by the parties' output shares. We calculate the mutual rates for several specific itFSS schemes. We also define computational function privacy and propose a 2-party itFSS scheme with computational function privacy.