Security vulnerability in a non-interactive ID-based proxy re-encryption scheme

Authors:
Woo Kwon Koo;Jung Yeon Hwang;Dong Hoon Lee
Affiliations:
Graduate School of Information Management and Security, Korea University 1, 5-Ka, Anam-dong Sungbuk-ku, Seoul 136-701, Republic of Korea;Electronics and Telecommunications Research Institute (ETRI), Daejeon, Republic of Korea;Graduate School of Information Management and Security, Korea University 1, 5-Ka, Anam-dong Sungbuk-ku, Seoul 136-701, Republic of Korea
Venue:
Information Processing Letters
Year:
2009

Citing 4
Cited 1

Improved proxy re-encryption schemes with applications to secure distributed storage

ACM Transactions on Information and System Security (TISSEC)
Chosen-ciphertext secure proxy re-encryption

Proceedings of the 14th ACM conference on Computer and communications security
Proxy re-encryption systems for identity-based encryption

Pairing'07 Proceedings of the First international conference on Pairing-Based Cryptography
Identity-based proxy re-encryption without random oracles

ISC'07 Proceedings of the 10th international conference on Information Security

On the security of two multi-use CCA-secure proxy re-encryption schemes

International Journal of Intelligent Information and Database Systems

Quantified Score

Hi-index	0.89

Visualization

Abstract

Recently, a non-interactive identity-based proxy re-encryption scheme was proposed for achieving CCA-security. In the paper, we show that the identity-based proxy re-encryption scheme is unfortunately vulnerable to a collusion attack. The collusion of a proxy and a malicious user enables two parties to derive other honest user's private key and thereby decrypt ciphertexts intended for the honest user.