A publicly verifiable encryption scheme with short public/private keys

Authors:
Yujun Liu;Yonggang Cui;Limin Liu
Affiliations:
Department of Information Engineering, The Academy of Armored Forces Engineering, Beijing, China;State Key Laboratory of Information Security, Graduate School of the Chinese Academy of Sciences, Beijing, China;Department of Optical and Electronic Engineering, PLA Ordnance Engineering College, Shijiazhuang, China
Venue:
WASA'10 Proceedings of the 5th international conference on Wireless algorithms, systems, and applications
Year:
2010

Citing 5
Cited 0

Non-Interactive Zero-Knowledge Proof of Knowledge and Chosen Ciphertext Attack

CRYPTO '91 Proceedings of the 11th Annual International Cryptology Conference on Advances in Cryptology
A Practical Public Key Cryptosystem Provably Secure Against Adaptive Chosen Ciphertext Attack

CRYPTO '98 Proceedings of the 18th Annual International Cryptology Conference on Advances in Cryptology
Direct chosen ciphertext security from identity-based techniques

Proceedings of the 12th ACM conference on Computer and communications security
Improved efficiency for CCA-secure cryptosystems built using identity-based encryption

CT-RSA'05 Proceedings of the 2005 international conference on Topics in Cryptology
Efficient identity-based encryption without random oracles

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques

Quantified Score

Hi-index	0.00

Visualization

Abstract

A publicly verifiable public key encryption scheme has the property that the validity of ciphertexts can be verified without knowledge of private key, which facilitate its non-interactive threshold decryption. Based on a selective identity secure IBE by Boneh et. al, a new publicly verifiable encryption scheme is presented using two hash functions. We prove the IND-CCA2 security of the new scheme under decisional BDHI assumption and target collision resistant property of two hash functions. Furthermore, our scheme has very short public and private keys that are independent of the security parameter, witch significantly simplifies public key certificate management and reduces the computation cost for encryption or decryption.