Certificate-Based Encryption Scheme with General Access Structure

Hyla, Tomasz; Pejaś, Jerzy

doi:10.1007/978-3-642-33260-9_3

Cited by 10 publications

(9 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Wu and others proposed another generic construction of CBE from CL-PKE [24]. Many other CBE schemes have been proposed [25]- [29]. In 2006, Morillo and others proposed the first CBE scheme without random oracles [30].…”

Section: Related Workmentioning

confidence: 99%

Certificate-Based Signcryption Scheme without Pairing: Directly Verifying Signcrypted Messages Using a Public Key

Le¹,

Hwang²

2016

ETRI J

View full text Add to dashboard Cite

To achieve confidentiality, integrity, authentication, and non-repudiation simultaneously, the concept of signcryption was introduced by combining encryption and a signature in a single scheme. Certificate-based encryption schemes are designed to resolve the key escrow problem of identity-based encryption, as well as to simplify the certificate management problem in traditional public key cryptosystems. In this paper, we propose a new certificate-based signcryption scheme that has been proved to be secure against adaptive chosen ciphertext attacks and existentially unforgeable against chosen-message attacks in the random oracle model. Our scheme is not based on pairing and thus is efficient and practical. Furthermore, it allows a signcrypted message to be immediately verified by the public key of the sender. This means that verification and decryption of the signcrypted message are decoupled. To the best of our knowledge, this is the first signcryption scheme without pairing to have this feature.Keywords: Signcryption, certificate-based signcryption, certificate-based public key cryptography. Manuscript received Nov. 15, 2015; revised Mar. 3, 2016, accepted Apr. 19, 2016 I. IntroductionAuthentication is a fundamental block of a secure system. Basically, it is a process for verifying that the identity of an entity belongs to a human or a device. For example, in the authentication process, a certificate in traditional public key cryptography (PKC) is usually used to prove that a public key belongs to a specific user. However, a public key infrastructure (PKI) that supports a traditional PKC has issues, such as complex installation and maintenance processes, issuance, distribution, and a revocation of the certificates.Although the authentication process seems to be irreplaceable, some public key cryptography models have been proposed in which the certificate is eliminated. In 1984, Shamir proposed the first concept of identity-based public key cryptography (ID-PKC) [1]. This scheme shows a great improvement, that is, it does not require PKI because the public key is an identity (for example, email, ID number, driver license number, and so on). In ID-PKC, a private key generator (PKG) uses a master secret key to generate all private keys for its users. The PKG requires secure channels to deliver the private keys to users securely. Although the improvement in ID-PKC is significant, some architectural issues still remain: (1) A secure channel to deliver the private keys is significantly costly to implement. (2) The PKG can impersonate any user at any time because it knows the private keys of all users, which is called the key escrow problem. This issue is unacceptable in certain cases such as legal applications because the PKG cannot guarantee non-repudiation. (3) Finally, the security of the whole system depends on the secrecy of the master secret key. If the PKG is compromised and the master key is revealed, the whole system is affected.To overcome the drawbacks of the traditional PKC and ID-PKC, the first concept ...

show abstract

Section: Related Workmentioning

confidence: 99%

Certificate-Based Signcryption Scheme without Pairing: Directly Verifying Signcrypted Messages Using a Public Key

Le¹,

Hwang²

2016

ETRI J

View full text Add to dashboard Cite

show abstract

“…In this Section first we review our Certificate-Based Encryption Scheme with General Access Structure (CIBE-GAS) [1]. This group encryption algorithm is intended to encrypt short plaintext messages M, which are a bit strings of length p. In Section 3 extension of CIBE-GAS scheme allowing to encrypt arbitrary length messages is presented.…”

Section: Full Certificate-based Encryption Scheme With General Accessmentioning

confidence: 99%

“…Section 2 contains description of basic bilinear pairings and short description of our CIBE-GAS scheme introduced in [1]. Section 3 introduces CIBE-GAS-H scheme, which is an extension of CIBE-GAS scheme for arbitrary length messages.…”

Section: Paper Organisationmentioning

confidence: 99%

“…In this paper we introduce a new practical CIBE-GAS-H scheme (the modification of our previous CIBE-GAS scheme [1]). The new CIBE-GAS-H scheme is designed to work with arbitrary length messages while original CIBE-GAS scheme works with limited length messages only.…”

Section: Our Contributionsmentioning

confidence: 99%

“…Due to these mechanisms, the information can be stored in the network in an encrypted form and decrypted only by authorised users [1,2]. However, the development of a system that uses such mechanisms requires consideration of many additional architectural problems.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

A Practical Certificate and Identity Based Encryption Scheme and Related Security Architecture

Hyla

Pejaś

2013

Computer Information Systems and Industrial Management

Self Cite

View full text Add to dashboard Cite

Abstract. Group encryption schemes based on general access structures can be used to build advanced IT systems, which store and manage confidential documents. The paper proposes a reference architecture of public key cryptography infrastructure required to implement CIBE-GAS scheme. The CIBE-GAS scheme is a certificate-based group-oriented encryption scheme with an effective secret sharing scheme based on general access structure and bilinear pairings. The security architecture required to implement the scheme must be compliant with common standards and technical specifications, e.g. X.509 certificate format and XML-encryption standard for messages. In order to encrypt arbitrary-length messages, we also suggest a new CIBE-GAS-H scheme with a key encapsulation mechanism based on the techniques of Bentahar et al., and combined with one-time symmetric-key encryption.

show abstract

Efficient certificate‐based encryption schemes without pairing

Kim

Hwang

2016

Security Comm Networks

View full text Add to dashboard Cite

Recently, a lot of researches focused on identity‐based encryption (IBE). The advantage of this scheme is that it can reduce the cost of the public key infrastructure by simplifying certificate management. Although IBE has its own innovations, one of its weaknesses is the key escrow problem. That is, the private key generator in IBE knows decryption keys for all identities and consequently can decrypt any ciphertexts. The certificate‐based encryption (CBE) scheme proposed in EUROCRYPT 2003 provides a solution for the key escrow problem by allowing the certification authority to possess a partial decryption key that comprises the full decryption key together with the user‐generated private key. In this paper, we propose new CBE schemes without pairing and prove them to be Indistinguishability under Chosen Ciphertext Attack secure in the random oracle model based on the hardness of the computational Diffie–Hellman problem. When compared with other CBE schemes, our schemes are significantly efficient in terms of performance, which makes our schemes suitable for computation‐limited node (e.g., sensor, wearable device) networks. Copyright © 2016 John Wiley & Sons, Ltd.

show abstract

Certificate-Based Encryption Scheme with General Access Structure

Cited by 10 publications

References 18 publications

Certificate-Based Signcryption Scheme without Pairing: Directly Verifying Signcrypted Messages Using a Public Key

Certificate-Based Signcryption Scheme without Pairing: Directly Verifying Signcrypted Messages Using a Public Key

A Practical Certificate and Identity Based Encryption Scheme and Related Security Architecture

Efficient certificate‐based encryption schemes without pairing

Contact Info

Product

Resources

About