research-article

Fully secure key-policy attribute-based encryption with constant-size ciphertexts and fast decryption

Authors:

Robert H. Deng,

Jian WengAuthors Info & Claims

ASIA CCS '14: Proceedings of the 9th ACM symposium on Information, computer and communications security

Pages 239 - 248

https://doi.org/10.1145/2590296.2590334

Published: 04 June 2014 Publication History

Abstract

Attribute-based encryption (ABE), introduced by Sahai and Waters, is a promising cryptographic primitive, which has been widely applied to implement fine-grained access control system for encrypted data. In its key-policy flavor, attribute sets are used to annotate ciphertexts and secret keys are associated with access structures that specify which ciphertexts a user is entitled to decrypt. In most existing key-policy attribute-based encryption (KP-ABE) constructions, the size of the ciphertext is proportional to the number of attributes associated with it and the decryption cost is proportional to the number of attributes used during decryption. In this paper, we present a new construction of KP-ABE. Our proposed construction is the first KP-ABE scheme, which has the following features simultaneously: expressive (i.e., supporting arbitrary monotonic access structures); fully secure in the standard model; constant-size ciphertexts and fast decryption. The downside of our construction is that secret keys have quadratic size in the number of attributes.

References

[1]

N. Attrapadung and H. Imai. Dual-policy attribute based encryption. In ACNS, pages 168--185, 2009.

Digital Library

[2]

N. Attrapadung and B. Libert. Functional encryption for inner product: Achieving constant-size ciphertexts with adaptive security or support for negation. In Public Key Cryptography, pages 384--402, 2010.

Digital Library

[3]

N. Attrapadung and B. Libert. Functional encryption for public-attribute inner products: Achieving constant-size ciphertexts with adaptive security or support for negation. J. Mathematical Cryptology, 5(2):115--158, 2012.

[4]

N. Attrapadung, B. Libert, and E. de Panafieu. Expressive key-policy attribute-based encryption with constant-size ciphertexts. In Public Key Cryptography, pages 90--108, 2011.

Digital Library

[5]

A. Beimel. Secure Schemes for Secret Sharing and Key Distribution. PhD thesis, Israel Institute of Technology, 1996.

[6]

M. Bellare and P. Rogaway. Random oracles are practical: A paradigm for designing efficient protocols. In ACM Conference on Computer and Communications Security, pages 62--73, 1993.

Digital Library

[7]

J. Bethencourt, A. Sahai, and B. Waters. Ciphertext-policy attribute-based encryption. In IEEE Symposium on Security and Privacy, pages 321--334, 2007.

Digital Library

[8]

D. Boneh and X. Boyen. Efficient selective-id secure identity-based encryption without random oracles. In EUROCRYPT, pages 223--238, 2004.

[9]

D. Boneh, X. Boyen, and E.-J. Goh. Hierarchical identity based encryption with constant size ciphertext. In EUROCRYPT, pages 440--456, 2005.

Digital Library

[10]

D. Boneh and M. K. Franklin. Identity-based encryption from the weil pairing. SIAM J. Comput., 32(3):586--615, 2003.

Digital Library

[11]

D. Boneh, E.-J. Goh, and K. Nissim. Evaluating 2-dnf formulas on ciphertexts. In TCC, pages 325--341, 2005.

Digital Library

[12]

D. Boneh and M. Hamburg. Generalized identity based and broadcast encryption schemes. In ASIACRYPT, pages 455--470, 2008.

Digital Library

[13]

R. Canetti, S. Halevi, and J. Katz. A forward-secure public-key encryption scheme. In EUROCRYPT, pages 255--271, 2003.

Digital Library

[14]

M. Chase. Multi-authority attribute based encryption. In TCC, pages 515--534, 2007.

Digital Library

[15]

M. Chase and S. S. M. Chow. Improving privacy and security in multi-authority attribute-based encryption. In ACM Conference on Computer and Communications Security, pages 121--130, 2009.

Digital Library

[16]

L. Cheung and C. C. Newport. Provably secure ciphertext policy ABE. In ACM Conference on Computer and Communications Security, pages 456--465, 2007.

Digital Library

[17]

K. Emura, A. Miyaji, A. Nomura, K. Omote, and M. Soshi. A ciphertext-policy attribute-based encryption scheme with constant ciphertext length. In ISPEC, pages 13--23, 2009.

Digital Library

[18]

S. Garg, C. Gentry, S. Halevi, A. Sahai, and B. Waters. Attribute-based encryption for circuits from multilinear maps. IACR Cryptology ePrint Archive, 2013:128, 2013.

[19]

S. Gorbunov, V. Vaikuntanathan, and H. Wee. Attribute-based encryption for circuits. In STOC, pages 545--554, 2013.

Digital Library

[20]

V. Goyal, A. Jain, O. Pandey, and A. Sahai. Bounded ciphertext policy attribute based encryption. In ICALP (2), pages 579--591, 2008.

Digital Library

[21]

V. Goyal, O. Pandey, A. Sahai, and B. Waters. Attribute-based encryption for fine-grained access control of encrypted data. In ACM Conference on Computer and Communications Security, pages 89--98, 2006.

Digital Library

[22]

J. Herranz, F. Laguillaumie, and C. Ràfols. Constant size ciphertexts in threshold attribute-based encryption. In Public Key Cryptography, pages 19--34, 2010.

Digital Library

[23]

S. Hohenberger and B. Waters. Attribute-based encryption with fast decryption. In Public Key Cryptography, pages 162--179, 2013.

[24]

J. Katz, A. Sahai, and B. Waters. Predicate encryption supporting disjunctions, polynomial equations, and inner products. Cryptology ePrint Archive, Report 2007/404, 2007. http://eprint.iacr.org/.

[25]

A. B. Lewko, T. Okamoto, A. Sahai, K. Takashima, and B. Waters. Fully secure functional encryption: Attribute-based encryption and (hierarchical) inner product encryption. In EUROCRYPT, pages 62--91, 2010.

Digital Library

[26]

A. B. Lewko and B. Waters. New techniques for dual system encryption and fully secure HIBE with short ciphertexts. In TCC, pages 455--479, 2010.

Digital Library

[27]

A. B. Lewko and B. Waters. Decentralizing attribute-based encryption. In EUROCRYPT, pages 568--588, 2011.

Digital Library

[28]

A. B. Lewko and B. Waters. Unbounded hibe and attribute-based encryption. In EUROCRYPT, pages 547--567, 2011.

Digital Library

[29]

A. B. Lewko and B. Waters. New proof methods for attribute-based encryption: Achieving full security through selective techniques. In CRYPTO, pages 180--198, 2012.

Digital Library

[30]

H. Lin, Z. Cao, X. Liang, and J. Shao. Secure threshold multi authority attribute based encryption without a central authority. In INDOCRYPT, pages 426--436, 2008.

Digital Library

[31]

S. Müller, S. Katzenbeisser, and C. Eckert. Distributed attribute-based encryption. In ICISC, pages 20--36, 2008.

[32]

R. Ostrovsky, A. Sahai, and B. Waters. Attribute-based encryption with non-monotonic access structures. In ACM Conference on Computer and Communications Security, pages 195--203, 2007.

Digital Library

[33]

Y. Rouselakis and B. Waters. New constructions and proof methods for large universe attribute-based encryption. IACR Cryptology ePrint Archive, 2012:583, 2012.

[34]

A. Sahai and B. Waters. Fuzzy identity-based encryption. In EUROCRYPT, pages 457--473, 2005.

Digital Library

[35]

A. Shamir. Identity-based cryptosystems and signature schemes. In CRYPTO, pages 47--53, 1984.

Digital Library

[36]

B. Waters. Ciphertext-policy attribute-based encryption: An expressive, efficient, and provably secure realization. In Public Key Cryptography, pages 53--70, 2011.

Digital Library

Cited By

Tseng Y(2025)Blacklisting access control via negated subset predicate encryption: Constant-size ciphertexts/keys constructions with adaptive security or attribute hidingJournal of Information Security and Applications10.1016/j.jisa.2024.10395989(103959)Online publication date: Mar-2025
https://doi.org/10.1016/j.jisa.2024.103959
Cai JZhang HDuo ZWang XZhao X(2024)A Multi-Group-Supporting Policy Hidden Fine-Grained Data Sharing Scheme in 5G-Enabled IoT With Edge ComputingIEEE Access10.1109/ACCESS.2024.338150912(46362-46378)Online publication date: 2024
https://doi.org/10.1109/ACCESS.2024.3381509
Walid RJoshi KChoi S(2024)Comparison of attribute-based encryption schemes in securing healthcare systemsScientific Reports10.1038/s41598-024-57692-w14:1Online publication date: 26-Mar-2024
https://doi.org/10.1038/s41598-024-57692-w
Show More Cited By

Index Terms

Fully secure key-policy attribute-based encryption with constant-size ciphertexts and fast decryption
1. Security and privacy
  1. Cryptography
    1. Public key (asymmetric) techniques
      1. Public key encryption

Recommendations

Fully Secure Unbounded Revocable Key-Policy Attribute-Based Encryption Scheme
Security, Privacy, and Anonymity in Computation, Communication, and Storage
Abstract
Attribute-based encryption (ABE) is a promising cryptographic primitive which can provide fine-grained access control over encrypted data. Providing an efficient revocation mechanism for ABE scheme is crucial since users’ credentials may be ...
New fully secure hierarchical identity-based encryption with constant size ciphertexts
ISPEC'11: Proceedings of the 7th international conference on Information security practice and experience

Hierarchical identity-based encryption (HIBE) is a generalization of identity-based encryption (IBE) which allows for a hierarchy of identities where any parent identities can derive secret keys for child identities. In this paper, we propose a new HIBE ...
Fully Secure Ciphertext-Policy Attribute-Based Encryption with Constant Size Ciphertext
MINES '11: Proceedings of the 2011 Third International Conference on Multimedia Information Networking and Security

In a cipher text-policy ABE (CP-ABE) scheme, an encrypt or can express any access policy, stating what kind of receivers will be able to decrypt the message in the encryption algorithm. In most CP-ABE schemes, the size of cipher texts is not constant, ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

cover image ACM Conferences

ASIA CCS '14: Proceedings of the 9th ACM symposium on Information, computer and communications security

June 2014

556 pages

ISBN:9781450328005

DOI:10.1145/2590296

General Chair:
Shiho Moriai
NICT, Japan
,
Program Chairs:
Trent Jaeger
Penn State University, USA
,
Kouichi Sakurai
Kyushu University, Japan

Copyright © 2014 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Sponsors

SIGSAC: ACM Special Interest Group on Security, Audit, and Control

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 04 June 2014

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Funding Sources

Guangdong Provincial Natural Science Foundation
Fok Ying Tong Education Foundation
Ministry of Education of the People's Republic of China
Open Research Fund of State Key Lab. of Integrated Services Networks
Office of Research, Singapore Management University
National Natural Science Foundation of China
Program for New Century Excellent Talents in University

Conference

ASIA CCS '14

Sponsor:

SIGSAC

ASIA CCS '14: 9th ACM Symposium on Information, Computer and Communications Security

June 4 - 6, 2014

Kyoto, Japan

Acceptance Rates

ASIA CCS '14 Paper Acceptance Rate 50 of 255 submissions, 20%;

Overall Acceptance Rate 418 of 2,322 submissions, 18%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

27
Total Citations
View Citations
735
Total Downloads

Downloads (Last 12 months)20
Downloads (Last 6 weeks)1

Reflects downloads up to 27 Jan 2025

Other Metrics

View Author Metrics

Citations

Cited By

Tseng Y(2025)Blacklisting access control via negated subset predicate encryption: Constant-size ciphertexts/keys constructions with adaptive security or attribute hidingJournal of Information Security and Applications10.1016/j.jisa.2024.10395989(103959)Online publication date: Mar-2025
https://doi.org/10.1016/j.jisa.2024.103959
Cai JZhang HDuo ZWang XZhao X(2024)A Multi-Group-Supporting Policy Hidden Fine-Grained Data Sharing Scheme in 5G-Enabled IoT With Edge ComputingIEEE Access10.1109/ACCESS.2024.338150912(46362-46378)Online publication date: 2024
https://doi.org/10.1109/ACCESS.2024.3381509
Walid RJoshi KChoi S(2024)Comparison of attribute-based encryption schemes in securing healthcare systemsScientific Reports10.1038/s41598-024-57692-w14:1Online publication date: 26-Mar-2024
https://doi.org/10.1038/s41598-024-57692-w
Rao YSrivastava VMohanty TDebnath S(2024)Designing quantum-secure attribute-based encryptionCluster Computing10.1007/s10586-024-04546-927:9(13075-13091)Online publication date: 22-Jun-2024
https://doi.org/10.1007/s10586-024-04546-9
Alsuwian TShahid Butt AAmin A(2022)Smart Grid Cyber Security Enhancement: Challenges and Solutions—A ReviewSustainability10.3390/su14211422614:21(14226)Online publication date: 31-Oct-2022
https://doi.org/10.3390/su142114226
Hwang YKim SSeo DLee I(2022)An SKP-ABE Scheme for Secure and Efficient Data Sharing in Cloud EnvironmentsWireless Communications & Mobile Computing10.1155/2022/13844052022Online publication date: 1-Jan-2022
https://dl.acm.org/doi/10.1155/2022/1384405
Zhang LYou WMu Y(2022)Secure Outsourced Attribute-Based Sharing Framework for Lightweight Devices in Smart Health SystemsIEEE Transactions on Services Computing10.1109/TSC.2021.307374015:5(3019-3030)Online publication date: 1-Sep-2022
https://doi.org/10.1109/TSC.2021.3073740
Sun JYuan YTang MCheng XNie XAftab M(2022)Privacy-Preserving Bilateral Fine-Grained Access Control for Cloud-Enabled Industrial IoT HealthcareIEEE Transactions on Industrial Informatics10.1109/TII.2021.313334518:9(6483-6493)Online publication date: Sep-2022
https://doi.org/10.1109/TII.2021.3133345
Sun JXu GZhang TAlazab MDeng R(2022)A Practical Fog-Based Privacy-Preserving Online Car-Hailing Service SystemIEEE Transactions on Information Forensics and Security10.1109/TIFS.2022.319627117(2862-2877)Online publication date: 2022
https://doi.org/10.1109/TIFS.2022.3196271
Lai JGuo FSusilo WJiang PYang GHuang X(2022)Generic conversions from CPA to CCA without ciphertext expansion for threshold ABE with constant-size ciphertextsInformation Sciences: an International Journal10.1016/j.ins.2022.08.069613:C(966-981)Online publication date: 1-Oct-2022
https://dl.acm.org/doi/10.1016/j.ins.2022.08.069
Show More Cited By

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Figures

Tables

Media

View Table of Conten