Black-box accountable authority identity-based encryption

ABSTRACT

A well-known concern in the setting of identity based encryption is that the PKG is all powerful and has to be completely trusted. To mitigate this problem, the notion of Accountable Authority Identity-Based Encryption (A-IBE) was recently introduced by Goyal. Goyal provided constructions to realize the notion of A-IBE only in the white box and weak black box models. However, the security guarantees provided by these models fall short of those required in practice.

In this paper, we resolve the main open question left in Goyal's work by providing a construction of a (fully) black box A-IBE system. Our construction is based on the Decisional Bilinear Diffie-Hellman assumption and uses techniques from key policy attribute based encryption.

REFERENCES

• 1: S.S. Al-Riyami and K.G. Paterson. Certificateless public key cryptography. In C.-S. Laih, editor, ASIACRYPT, volume 2894 of Lecture Notes in Computer Science, pages 452--473. Springer, 2003.
• 2: M.H. Au, Q. Huang, J.K. Liu, W. Susilo, D.S. Wong, and G. Yang. Traceable and retrievable identity-based encryption. In Applied Cryptography and Network Security, volume 5037 of Lecture Notes in Computer Science, pages 94--110. Springer Berlin/Heidelberg, 2008.
• 3: D. Boneh. and X. Boyen. Efficient Selective-ID Secure Identity Based Encryption Without Random Oracles. In Advances in Cryptology -- Eurocrypt, volume 3027 of LNCS, pages 223--238. Springer, 2004.
• 4: D. Boneh and X. Boyen. Secure identity based encryption without random oracles. In M.K. Franklin, editor, CRYPTO, volume 3152 of Lecture Notes in Computer Science, pages 443--459. Springer, 2004.
• 5: D. Boneh, X. Boyen, and E.-J. Goh. Hierarchical identity based encryption with constant size ciphertext. In Cramer {13}, pages 440--456.
• 6: Dan Boneh , Matthew K. Franklin, Identity-Based Encryption from the Weil Pairing, Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology, p.213-229, August 19-23, 2001
• 7: D. Boneh and J. Katz. Improved efficiency for cca-secure cryptosystems built using identity-based encryption. In CT-RSA, pages 87--103, 2005.
• 8: Xavier Boyen , Qixiang Mei , Brent Waters, Direct chosen ciphertext security from identity-based techniques, Proceedings of the 12th ACM conference on Computer and communications security, November 07-11, 2005, Alexandria, VA, USA [doi>10.1145/1102120.1102162]
• 9: Jan Camenisch , Gregory Neven , Abhi Shelat, Simulatable Adaptive Oblivious Transfer, Proceedings of the 26th annual international conference on Advances in Cryptology, p.573-590, May 20-24, 2007, Barcelona, Spain [doi>10.1007/978-3-540-72540-4_33]
• 10: R. Canetti. Security and composition of multiparty cryptographic protocols. Journal of Cryptology, 13(1):143--202, 2000.
• 11: R. Canetti, S. Halevi, and J. Katz. A Forward-Secure Public-Key Encryption Scheme. In Advances in Cryptology -- Eurocrypt, volume 2656 of LNCS. Springer, 2003.
• 12: R. Canetti, S. Halevi, and J. Katz. Chosen Ciphertext Security from Identity Based Encryption. In Advances in Cryptology -- Eurocrypt, volume 3027 of LNCS, pages 207--222. Springer, 2004.
• 13: Ronald Cramer, Advances in Cryptology - EUROCRYPT 2005: 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Aarhus, Denmark, ... (Lecture Notes in Computer Science), Springer-Verlag New York, Inc., Secaucus, NJ, 2005
• 14: Shimon Even , Oded Goldreich , Abraham Lempel, A randomized protocol for signing contracts, Communications of the ACM, v.28 n.6, p.637-647, June 1985 [doi>10.1145/3812.3818]
• 15: C. Gentry. Certificate-based encryption and the certificate revocation problem. In E. Biham, editor, EUROCRYPT, volume 2656 of Lecture Notes in Computer Science, pages 272--293. Springer, 2003.
• 16: C. Gentry. Practical identity-based encryption without random oracles. In S. Vaudenay, editor, EUROCRYPT, volume 4004 of Lecture Notes in Computer Science, pages 445--464. Springer, 2006.
• 17: V. Goyal. Reducing Trust in the PKG in Identity Based Cryptosystems. In Advances in Cryptology -- CRYPTO 2007, volume 4622 of LNCS, pages 430--447. Springer, 2007.
• 18: V. Goyal, S. Lu, A. Sahai, and B. Waters. Black-box accountable authority identity-based encryption. Manuscript, 2008.
• 19: Vipul Goyal , Omkant Pandey , Amit Sahai , Brent Waters, Attribute-based encryption for fine-grained access control of encrypted data, Proceedings of the 13th ACM conference on Computer and communications security, October 30-November 03, 2006, Alexandria, Virginia, USA [doi>10.1145/1180405.1180418]
• 20: M. Green and S. Hohenberger. Blind identity-based encryption and simulatable oblivious transfer. Cryptology ePrint Archive, 2007. http://eprint.iacr.org/2007/235.
• 21: Byoungcheon Lee , Colin Boyd , Ed Dawson , Kwangjo Kim , Jeongmo Yang , Seungjae Yoo, Secure key issuing in ID-based cryptography, Proceedings of the second workshop on Australasian information security, Data Mining and Web Intelligence, and Software Internationalisation, p.69-74, January 01, 2004, Dunedin, New Zealand
• 22: A.Y. Lindell. Efficient Fully-Simulatable Oblivious Transfer. In CR-RSA 2007, LNCS. Springer, 2008.
• 23: A. Sahai and B. Waters. Fuzzy Identity Based Encryption. In Advances in Cryptology -- Eurocrypt, volume 3494 of LNCS, pages 457--473. Springer, 2005.
• 24: Adi Shamir, Identity-based cryptosystems and signature schemes, Proceedings of CRYPTO 84 on Advances in cryptology, p.47-53, August 1985, Santa Barbara, California, United States
• 25: B. Waters. Efficient identity-based encryption without random oracles. In Cramer, pages 114--127.

INDEX TERMS

Primary Classification:
  E. Data
  E.3 DATA ENCRYPTION
      Subjects: Public key cryptosystems

General Terms:
Algorithms, Security

Keywords:
accountable authority, identity-based encryption