TC: Small: New Directions in Encryption

TC：小：加密的新方向

• 批准号: 1118096
• 负责人: Amit Sahai
• 金额: $ 49.54万
• 依托单位: University of California-Los Angeles
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-08-01 至 2015-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1118096&HistoricalAwards=false
• 关键词: TC; Small; New; Directions; Encryption

New application scenarios (most notably arising from cloud computing) have given rise to a host of new security concerns. Unsurprisingly, classical notions of encryption leave much to be desired for dealing with these new application scenarios and concerns. Motivated by these concerns, we develop novel encryption systems that provide vastly greater functionality than classical notions of encryption. In particular, we focus on two broad research directions: Functional encryption and Efficient Secure Encodings of Computation. In functional encryption, instead of encrypting a message to an individual user, one can encrypt a general function f. If a receiving user possesses certain credentials X, then it obtains a secret key SK-X corresponding to those credentials. When this user obtains a ciphertext that is an encryption of f, by applying the decryption algorithm it obtains f(X), and no more. Efficient Secure Encodings of Computation is a totally new notion that has fundamental applications to novel expressive encryption schemes including functional encryption with public keys (recently introduced by the PI under the terminology ?Worry-Free Encryption?), and most notably controlled Homomorphic Encryption -- where expressive homomorphisms are possible on ciphertexts, but the initial encryptor can control what homomorphisms are allowed.

新的应用程序场景（最明显的是来自云计算）引起了许多新的安全问题。毫不奇怪，传统的加密概念在处理这些新的应用程序场景和关注点方面还有很多不足之处。出于这些考虑，我们开发了新的加密系统，提供比传统加密概念更大的功能。我们特别关注两个广泛的研究方向：功能加密和计算的高效安全编码。在功能加密中，可以对通用功能f进行加密，而不是对单个用户的消息进行加密。如果接收用户拥有某些凭据X，则它获得与这些凭据对应的密钥SK-X。当该用户获得加密为f的密文时，通过应用解密算法，它获得f(X)，仅此而已。有效的安全计算编码是一个全新的概念，它对新颖的表达性加密方案具有基本的应用，包括使用公钥的功能加密(最近由PI在术语？)，以及最著名的受控同态加密——在这种情况下，密文上的表达同态是可能的，但初始加密器可以控制允许的同态。