CCA-secure proxy re-encryption without pairings

  • Jun Shao
  • , Zhenfu Cao*
  • *Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

197 Scopus citations

Abstract

In a proxy re-encryption scheme, a semi-trusted proxy can transform a ciphertext under Alice's public key into another ciphertext that Bob can decrypt. However, the proxy cannot access the plaintext. Due to its transformation property, proxy re-encryption can be used in many applications, such as encrypted email forwarding. In this paper, by using signature of knowledge and Fijisaki-Okamoto conversion, we propose a proxy re-encryption scheme without pairings, in which the proxy can only transform the ciphertext in one direction. The proposal is secure against chosen ciphertext attack (CCA) and collusion attack in the random oracle model based on Decisional Diffie-Hellman (DDH) assumption over ZN2 and integer factorization assumption, respectively. To the best of our knowledge, it is the first unidirectional PRE scheme with CCA security and collusion-resistance.

Original languageEnglish
Title of host publicationPublic Key Cryptography - PKC 2009 - 12th International Conference on Practice and Theory in Public Key Cryptography, Proceedings
PublisherSpringer Verlag
Pages357-376
Number of pages20
ISBN (Print)3642004679, 9783642004674
DOIs
StatePublished - 2009
Externally publishedYes
Event12th International Conference on Practice and Theory in Public Key Cryptography, PKC 2009 - Irvine, CA, United States
Duration: 18 Mar 200920 Mar 2009

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume5443
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference12th International Conference on Practice and Theory in Public Key Cryptography, PKC 2009
Country/TerritoryUnited States
CityIrvine, CA
Period18/03/0920/03/09

Keywords

  • CCA security
  • Collusion-resistance
  • DDH
  • Random oracle
  • Unidirectional PRE

Fingerprint

Dive into the research topics of 'CCA-secure proxy re-encryption without pairings'. Together they form a unique fingerprint.

Cite this