On the security of a bidirectional proxy re-encryption scheme from PKC 2010

  • Authors:
  • Jian Weng;Yunlei Zhao;Goichiro Hanaoka

  • Affiliations:
  • Department of Computer Science, Jinan Univ., Guangzhou, China and State Key Lab. of Networking and Switching Techn., Beijing Univ. of Posts and Telecomm., Beijing, China and State Key Lab. of Inf. ...;Software School, Fudan University, Shanghai, China;National Institute of Advanced Industrial Science and Technology, Tokyo, Japan

  • Venue:
  • PKC'11 Proceedings of the 14th international conference on Practice and theory in public key cryptography conference on Public key cryptography
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

In ACM CCS 2007, Canetti and Hohenberger left an interesting open problem of how to construct a chosen-ciphertext secure proxy re-encryption (PRE) scheme without bilinear maps. This is a rather interesting problem and has attracted great interest in recent years. In PKC 2010, Matsuda, Nishimaki and Tanaka introduced a novel primitive named re-applicable lossy trapdoor function, and then used it to construct a PRE scheme without bilinear maps. Their scheme is claimed to be chosen-ciphertext secure in the standard model. In this paper, we make a careful observation on their PRE scheme, and indicate that their scheme does not satisfy chosen-ciphertext security. The purpose of this paper is to clarify the fact that, it is still an open problem to come up with a chosen-ciphertext secure PRE scheme without bilinear maps in the standard model.