Public-key encryption with non-interactive opening

  • Authors:
  • Ivan Damgård;Dennis Hofheinz;Eike Kiltz;Rune Thorbek

  • Affiliations:
  • BRICS, Aarhus;CWI, Amsterdam;CWI, Amsterdam;BRICS, Aarhus

  • Venue:
  • CT-RSA'08 Proceedings of the 2008 The Cryptopgraphers' Track at the RSA conference on Topics in cryptology
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

We formally define the primitive of public-key encryption with non-interactive opening (PKENO), where the receiver of a cipher-text C can, convincingly and without interaction, reveal what the result was of decrypting C, without compromising the scheme's security. This has numerous applications in cryptographic protocol design, e.g., when the receiver wants to demonstrate that some information he was sent privately was not correctly formed. We give a definition based on the UC framework as well as an equivalent game-based definition. The PKENO concept was informally introduced by Damgård and Thorbek who suggested that it could be implemented based on Identity-Based Encryption. In this paper, we give direct and optimized implementations, that work without having to keep state information, unlike what one obtains from directly using IBE.