Updatable Public Key Encryption from DCR: Efficient Constructions With Stronger Security - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2022

Updatable Public Key Encryption from DCR: Efficient Constructions With Stronger Security

Résumé

Forward-secure encryption (FS-PKE) is a key-evolving public-key paradigm that preserves the confidentiality of past encryptions in case of key exposure. Updatable public-key encryption (UPKE) is a natural relaxation of FS-PKE, introduced by Jost et al. (Eurocrypt'19), which is motivated by applications to secure messaging. In UPKE, key updates can be triggered by any sender-via special update ciphertexts-willing to enforce the forward secrecy of its encrypted messages. So far, the only truly efficient UPKE candidates (which rely on the random oracle idealization) only provide rather weak security guarantees against passive adversaries as they are malleable. Also, they offer no protection against malicious senders willing to hinder the decryption capability of honest users. A recent work of Dodis et al. (TCC'21) described UPKE systems in the standard model that also hedge against maliciously generated update messages in the chosen-ciphertext setting (where adversaries are equipped with a decryption oracle). While important feasibility results, their constructions lag behind random-oracle candidates in terms of efficiency. In this paper, we first provide a drastically more efficient UPKE realization in the standard model using Paillier's Composite Residuosity (DCR) assumption. In the random oracle model, we then extend our initial scheme so as to achieve chosen-ciphertext security, even in a model that accounts for maliciously generated update ciphertexts. Under the DCR and Strong RSA assumptions, we thus obtain the first practical UPKE systems that satisfy the strongest security notions put forth by Dodis et al.
Fichier principal
Vignette du fichier
UPKE-acm.pdf (953.64 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03738749 , version 1 (26-07-2022)

Identifiants

  • HAL Id : hal-03738749 , version 1

Citer

Calvin Abou Haidar, Benoit Libert, Alain Passelègue. Updatable Public Key Encryption from DCR: Efficient Constructions With Stronger Security. ACM Conference on Computer and Communications Security (ACM-CCS) 2022, Nov 2022, Los Angeles, United States. ⟨hal-03738749⟩
315 Consultations
617 Téléchargements

Partager

Gmail Facebook X LinkedIn More