A Leakage-Resilient CCA-Secure Identity-Based Encryption Scheme

Abstract

Identity-based encryption (IBE) has many appealing applications. However, some traditional IBE schemes may not be secure in the real world due to the side-channel attacks. Leakage-resilient cryptography can capture these attacks by modeling information leakage that adversary can access. In this paper, we apply a hash proof technique in the existing CCA-secure variant of the Gentry's IBE scheme to construct a new leakage-resilient IBE scheme in the bounded-leakage model. The proposed scheme is more computationally efficient than the original Alwen et al.'s leakage-resilient IBE scheme. It enjoys a shorter key (public/secret key) length, and a higher relative key leakage ratio. The new leakage-resilient scheme is proved semantically secure against adaptive chosen ciphertext attack in the standard model under the truncated augmented bilinear Diffie-Hellman exponent (q-TABDHE) assumption.

Continuous leakage–resilient IBE in cloud computing

“…Apart from all other constructions, the scheme in Lewko et al listed in the above tables supports CPA security and enjoys additional property under subgroup decision (SD) assumptions. The scheme of Li et al supports CCA security under decisional q ‐augmented bilinear Diffie‐Hellman exponent ( q ‐ABDHE) assumption.…”

“…The scheme in Wang and Yiu does not perform the algorithm of bilinear group during calculating encryption cost and decryption cost, but it has a bigger ciphertext size than our scheme. The scheme in Li et al has lower public key size and decryption cost, whereas ours has lower ciphertext size and encryption cost. In addition, not all of the schemes support the continuous leakage–resilient property.…”

“…However, the above schemes can be faced with serious drawback that the leakage parameter relies on the length of the message. Faced with the problem, Liu et al 28 23 also presented CCA secure LR-IBE scheme in the standard model. Unfortunately, the above several schemes in the whole lifetime of secret key must continually resist the leakage.…”

“…Later, Liu et al and Sun et al provided another type of construction of CCA‐secure LR‐PKE scheme and LR‐IBE scheme, respectively. Li et al also presented CCA secure LR‐IBE scheme in the standard model.…”

Adaptively Secure Anonymous Identity-based Broadcast Encryption for Data Access Control in Cloud Storage Service

“…However, the first identity-based encryption (IBE) construction was put forward in the literature [23] until 2001. Subsequently, many IBE schemes were proposed [24,25]. By leveraging the idea of IBE, Delerablée [26] raised identity-based broadcast encryption (IBBE), which can be deemed as a special type of PKBE.…”