سند علمی

Two-Input Functional Encryption for Inner Products from Bilinear Maps

چکیده

Functional encryption is a new paradigm of public-key encryption that allows a user to compute f (x) on encrypted data CT (x) with a private key SK f to finely control the revealed information. Multi-input functional encryption is an important extension of (single-input) functional encryption that allows the computation f (x1, . . . ,xn) on multiple ciphertexts CT (x1), . . . ,CT (xn) with a private key SK f . Although multi-input functional encryption has many interesting applications like running SQL queries on encrypted database and computation on encrypted stream, current candidates are not yet practical since many of them are built on indistinguishability obfuscation. To solve this unsatisfactory situation, we show that practical two-input functional encryption schemes for inner products can be built based on bilinear maps. In this paper, we first propose a two-input functional encryption scheme for inner products in composite-order bilinear groups and prove its selective IND-security under simple assumptions. Next, we propose a two-client functional encryption scheme for inner products where each ciphertext can be associated with a time period and prove its selective IND-security. Furthermore, we show that our two-input functional encryption schemes in composite-order bilinear groups can be converted into schemes in prime-order asymmetric bilinear groups by using the asymmetric property of asymmetric bilinear groups.

اسناد مشابه

  • Multi-Input Functional Encryption for Inner Products: Function-Hiding Realizations and Constructions without Pairings

    سند علمی۲۰۱۷IACR Cryptology ePrint ArchiveMichel Abdalla, Dario Catalano, Dario Fiore, Romain Gay

    We present new constructions of multi-input functional encryption (MIFE) schemes for the inner-product functionality that improve the state of the art solution of Abdalla et al. (Eurocrypt 2017) in two main directions. First, we put forward a novel methodology to convert single-i

  • Function-Hiding Inner Product Encryption is Practical

    سند علمی۲۰۱۶IACR Cryptology ePrint ArchiveSam Kim, Kevin Lewi, Avradip Mandal, Hart William Montgomery

    In a functional encryption scheme, secret keys are associated with functions and ciphertexts are associated with messages. Given a secret key for a function f and a ciphertext for a message x, a decryptor learns f(x) and nothing else about x. Inner product encryption is a special

  • An instantiation of the Cramer-Shoup encryption paradigm using bilinear map groups

    سند علمی۲۰۰۵David Galindo, Jorge L. Villar

    A new instantiation of the Cramer-Shoup paradigm for secure encryption is presented, which is built using bilinear map groups. The security is based on the Bilinear Decisional Diffie-Hellman assumption. The recent efficiency improvements introduced in [KD04,GS04] are also applied

  • A New Approach for Practical Function-Private Inner Product Encryption

    سند علمی۲۰۱۷IACR Cryptology ePrint ArchiveSungwook Kim, Jinsu Kim, Jae Hong Seo

    Functional Encryption (FE) is a new paradigm supporting restricted decryption keys of function f that allows one to learn f(xj) from encryptions of messages xj . A natural and practical security requirements for FE is to keep not only messages x1, . . . , xq but also functions f1

  • Aggregate and Verifiably Encrypted Signatures from Bilinear Maps

    سند علمی۲۰۰۲EUROCRYPTDan Boneh, Craig Gentry, Ben Lynn, Hovav Shacham

    An aggregate signature scheme is a digital signature that supports aggregation: Given n signatures on n distinct messages from n distinct users, it is possible to aggregate all these signatures into a single short signature. This single signature (and the n original messages) wil

  • Function-Hiding Inner Product Encryption

    سند علمی۲۰۱۵ASIACRYPTAllison Bishop, Abhishek Jain, Lucas Kowalczyk

    We extend the reach of functional encryption schemes that are provably secure under simple assumptions against unbounded collusion to include function-hiding inner product schemes. Our scheme is a private key functional encryption scheme, where ciphertexts correspond to vectors ~