Provably secure certificate-based encryption with leakage resilience

Guo, Yuyan; Li, Jiguo; Lu, Yang; Zhang, Yichen; Zhang, Futai

doi:10.1016/j.tcs.2017.10.020

Cited by 28 publications

(15 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Therefore, it is challenging for us in the future to design more efficient anonymous IBBE schemes in virtue of prime order bilinear groups, which can achieve CCA2 security directly. Besides, the construction of anonymous IBBE schemes with leakage resilience [51,52] is another interesting issue.…”

Section: Resultsmentioning

confidence: 99%

Adaptively Secure Anonymous Identity-based Broadcast Encryption for Data Access Control in Cloud Storage Service

2019

KSII TIIS

View full text Add to dashboard Cite

Cloud computing is now a widespread and economical option when data owners need to outsource or share their data. Designing secure and efficient data access control mechanism is one of the most challenging issues in cloud storage service. Anonymous broadcast encryption is a promising solution for its advantages in the respects of computation cost and communication overload. We bring forward an efficient anonymous identity-based broadcast encryption construction combined its application to the data access control mechanism in cloud storage service. The lengths for public parameters, user private key and ciphertext in the proposed scheme are all constant. Compared with the existing schemes, in terms of encrypting and decrypting computation cost, the construction of our scheme is more efficient. Furthermore, the proposed scheme is proved to achieve adaptive security against chosen-ciphertext attack adversaries in the standard model. Therefore, the proposed scheme is feasible for the system of data access control in cloud storage service. . His research interests include cryptography and information security, cloud computing security, wireless security and trusted computing etc. He has published over 150 research papers in refereed international conferences and journals. His work has been cited more than 3000 times at Google Scholar. He has served as program committee member in over 30 international conferences and served as the reviewers in over 90 international journals and conferences. . Her research interests include cryptography, network security. She has published over 30 research papers in refereed international conferences and journals.

show abstract

Section: Resultsmentioning

confidence: 99%

Adaptively Secure Anonymous Identity-based Broadcast Encryption for Data Access Control in Cloud Storage Service

2019

KSII TIIS

View full text Add to dashboard Cite

show abstract

“…However, the performance of Yu et al's scheme is costly due to the dual system encryption technique. In 2018, Guo et al [34] proposed an efficient LR-CBE scheme, but it only allows adversaries to gain partial information of both the user's private key and certificate in the bounded leakage model. In the continuous leakage model, Li et al [35] proposed a new LR-CBE scheme.…”

Section: A Related Workmentioning

confidence: 99%

“…According to the review above, the leakage models of these existing LR-CBE schemes [33], [34], [35] have several restrictions and do not offer complete leakage abilities of adversaries. In this paper, we first present a new continuous leakage model of LR-CB-KE schemes.…”

Section: B Contribution and Organizationmentioning

confidence: 99%

“…In this paper, we first present a new continuous leakage model of LR-CB-KE schemes. The continuous leakage model is extended from the models of LR-CBE schemes presented in [33], [34], [35]. The continuous leakage model consists of two kinds of adversaries that include Type I adversary (uncertified entity) and Type II adversary (honest-but-curious CA).…”

Section: B Contribution and Organizationmentioning

confidence: 99%

See 1 more Smart Citation

Leakage-Resilient Certificate-based Key Encapsulation Scheme Resistant to Continual Leakage

Tseng

Huang

et al. 2020

IEEE Open J. Comput. Soc.

View full text Add to dashboard Cite

In the past, the security of most public-key encryption or key encapsulation schemes is shown in an ideal model, where private keys, secret keys and random values are assumed to be absolutely secure to adversaries. However, this ideal model is not practical due to side-channel attacks in the sense that adversaries could gain partial information of these secret values involved in decryption operations by perceiving energy consumption or execution timing. In such a case, these schemes under the ideal model could suffer from side-channel attacks. Recently, leakage-resilient cryptography resistant to side-channel attacks is an emerging research topic. Certificatebased encryption (CBE) or certificate-based key encapsulation (CB-KE) schemes are a class of important public-key encryption. However, little work addresses the design of leakageresilient CBE (LR-CBE) or leakage-resilient CB-KE (LR-CB-KE) schemes. In this paper, we present the first LR-CB-KE scheme with overall unbounded leakage property which permits adversaries to continuously gain partial information of the system secret key of a trusted certificate authority (CA), the private keys and certificates of users, and random values. In the generic bilinear group model, formal security analysis is made to prove that the proposed LR-CB-KE scheme is secure against chosen ciphertext attacks.

show abstract

“…Many ABE schemes [29][30][31][32][33][34][35][36][37][38] were presented in various application domains, such as ABE with outsourced data decryption [29,30,37], ABE with efficient attribute revocation [31], ABE with full verifiability [30], ABE with keyword search function [29,31], traceable ABE [32,33], ABE with leakage resilience [34][35][36], auditable ABE [38], etc. In order to solve key escrow problem, Li et al [39,40] presented two certificate-based encryption schemes with leakage resilience. ABE schemes have wide application in cloud storage [41,42], mobile social networks [43] and smart grid [44].…”

Section: Related Workmentioning

confidence: 99%

Two-Party Attribute-Based Key Agreement Protocol with Constant-Size Ciphertext and Key

Zhang

2018

Security and Communication Networks

Self Cite

View full text Add to dashboard Cite

Based on mutual authentication, the session key is established for communication nodes on the open network. In order to satisfy fine-grained access control for cloud storage, the two-party attribute-based key agreement protocol (TP-AB-KA) was proposed. However, the existing TP-AB-KA protocol is high in the cost of computation and communication and is not unfit for application in a mobile cloud setting because mobile devices are generally resource constrained. To solve the above issue, we propose a TP-AB-KA protocol with constant-size ciphertext and key. Our TP-AB-KA protocol is provable security in the standard model. The concrete proof is given under the augmented multisequence of exponents' decisional Diffie-Hellman (aMSE-DDH) hypothesis in the attribute-based BJM model (AB-BJM). Compared with the existing TP-AB-KA protocols, the computation cost and communication cost of our protocol are largely reduced.

show abstract

Provably secure certificate-based encryption with leakage resilience

Cited by 28 publications

References 12 publications

Adaptively Secure Anonymous Identity-based Broadcast Encryption for Data Access Control in Cloud Storage Service

Adaptively Secure Anonymous Identity-based Broadcast Encryption for Data Access Control in Cloud Storage Service

Leakage-Resilient Certificate-based Key Encapsulation Scheme Resistant to Continual Leakage

Two-Party Attribute-Based Key Agreement Protocol with Constant-Size Ciphertext and Key

Contact Info

Product

Resources

About