Efficient Identity-Based Encryption with Tight Security Reduction
Efficient Identity-Based Encryption with Tight Security Reduction
复制标题
DOI：
10.1007/11935070_2
复制
发表时间：
2006-12
期刊：
影响因子：
--
通讯作者：
Nuttapong Attrapadung;Jun Furukawa;Takeshi Gomi;Goichiro Hanaoka;H. Imai;Rui Zhang
中科院分区：
文献类型：
--
作者：
Nuttapong Attrapadung;Jun Furukawa;Takeshi Gomi;Goichiro Hanaoka;H. Imai;Rui Zhang
在《Crypto’01》的一篇著名论文中，Boneh 和 Franklin 提出了第一个功能齐全的基于身份的加密方案 (IBE)，距离 Shamir 提出这一概念大约十五年。他们的方案实现了选择密文安全（即 IND-ID-CCA 意义上的安全）；然而，安全性降低还远远不够。在本文中，我们提出了 Boneh-Franklin 方案的一种有效变体，它实现了严格的安全性降低。我们的方案基本上是一个有两个密钥的 IBE 方案，其中一个密钥是随机选择并提供给用户的。它可以被视为 Katz 和 Wang 提出的想法的延续；然而，与 Katz-Wang 变体不同，我们的方案非常有效，因为它的密文大小大致与原始的完整 Boneh-Franklin 方案相当。我们方案的安全性可以基于间隙双线性 Diffie-Hellman (GBDH) 或决策双线性 Diffie-Hellman (DBDH) 假设。
In a famous paper atCrypto’01, Boneh and Franklin proposed the first fully functional identity-based encryption scheme (IBE), around fifteen years after the concept was introduced by Shamir. Their scheme achieves chosen-ciphertext security (i.e.,secure in the sense ofIND-ID-CCA); however, the security reduction is far from being tight.In this paper, we present an efficient variant of the Boneh-Franklin scheme that achieves a tight security reduction. Our scheme is basically an IBE scheme under two keys, one of which is randomly chosen and given to the user. It can be viewed as a continuation of an idea introduced by Katz and Wang; however, unlike the Katz-Wang variant, our scheme is quite efficient, as its ciphertext size is roughly comparable to that of the original full Boneh-Franklin scheme. The security of our scheme can be based on either the gap bilinear Diffie-Hellman (GBDH) or the decisional bilinear Diffie-Hellman (DBDH) assumptions.