TY - JOUR
T1 - Achieving short ciphertexts or short secret-keys for adaptively secure general inner-product encryption
AU - Okamoto, Tatsuaki
AU - Takashima, Katsuyuki
N1 - Publisher Copyright:
© 2015, The Author(s).
PY - 2015/12/3
Y1 - 2015/12/3
N2 - In this paper, we present two non-zero inner-product encryption (NIPE) schemes that are adaptively secure under a standard assumption, the decisional linear (DLIN) assumption, in the standard model. One of the proposed NIPE schemes features constant-size ciphertexts and the other features constant-size secret-keys. Our NIPE schemes imply an identity-based revocation (IBR) system with constant-size ciphertexts or constant-size secret-keys that is adaptively secure under the DLIN assumption. Any previous IBR scheme with constant-size ciphertexts or constant-size secret-keys was not adaptively secure in the standard model. This paper also presents two zero inner-product encryption (ZIPE) schemes each of which has constant-size ciphertexts or constant-size secret-keys and is adaptively secure under the DLIN assumption in the standard model. They imply an identity-based broadcast encryption system with constant-size ciphertexts or constant-size secret-keys that is adaptively secure under the DLIN assumption. We also extend the proposed ZIPE schemes in two directions, one is a fully-attribute-hiding ZIPE scheme with constant-size secret-keys, and the other a hierarchical ZIPE scheme with constant-size ciphertexts.
AB - In this paper, we present two non-zero inner-product encryption (NIPE) schemes that are adaptively secure under a standard assumption, the decisional linear (DLIN) assumption, in the standard model. One of the proposed NIPE schemes features constant-size ciphertexts and the other features constant-size secret-keys. Our NIPE schemes imply an identity-based revocation (IBR) system with constant-size ciphertexts or constant-size secret-keys that is adaptively secure under the DLIN assumption. Any previous IBR scheme with constant-size ciphertexts or constant-size secret-keys was not adaptively secure in the standard model. This paper also presents two zero inner-product encryption (ZIPE) schemes each of which has constant-size ciphertexts or constant-size secret-keys and is adaptively secure under the DLIN assumption in the standard model. They imply an identity-based broadcast encryption system with constant-size ciphertexts or constant-size secret-keys that is adaptively secure under the DLIN assumption. We also extend the proposed ZIPE schemes in two directions, one is a fully-attribute-hiding ZIPE scheme with constant-size secret-keys, and the other a hierarchical ZIPE scheme with constant-size ciphertexts.
KW - Functional encryption
KW - Inner-product encryption
KW - Non-zero inner-product encryption
UR - http://www.scopus.com/inward/record.url?scp=84942981303&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84942981303&partnerID=8YFLogxK
U2 - 10.1007/s10623-015-0131-1
DO - 10.1007/s10623-015-0131-1
M3 - Article
AN - SCOPUS:84942981303
SN - 0925-1022
VL - 77
SP - 725
EP - 771
JO - Designs, Codes, and Cryptography
JF - Designs, Codes, and Cryptography
IS - 2-3
ER -