An efficient threshold public key cryptosystem secure against adaptive chosen ciphertext attack
A threshold public-key cryptosystem (PKC) represents a natural extension of the idea of a PKC in the following sense -- instead of a single party holding the private decryption key, there are \(n\) decryption servers, each of which holds a piece of the private decryption key. To decrypt a ciphertext \(c\) a user sends \(c\) to each decryption server, receives a piece of information from each, and uses the pieces collected to recover the cleartext. Previously, various threshold PKC were proposed, however these proposals required interaction among the servers and the user. Also non-interactive threshold PKC secure against ``chosen ciphertext attack (CCA) has been proposed, in the random-oracle model and under the decisional Diffie-Hellman (DDH) intractability assumption. The random oracle was used both in the proof of security and to eliminate interaction. In the paper a new threshold PKC, provably secure against CCA based on the DDH intractability assumption is presented. The scheme makes no use of random oracles. The paper begins with brief introduction and survey of its contributions. Then, a new definition of security for threshold PKC is outlined followed by the main section of the paper. The new proposal is based on the recent work by \textit{R. Cramer} and \textit{V. Shoup} [Crypto 1998, Lect. Notes Comput. Sci. 1462, 13--25 (1998; Zbl 0931.94018)]. A basic variant of the Cramer-Shoup scheme is first described and then slightly modified and shown to be secure against CCA (assuming the original scheme is secure against CCA). Subsequently the modified scheme is used to build the basic threshold scheme for the case where all servers follow their protocol. The last subsection deals with protecting against actively faulty decryption servers. For the entire collection see [Zbl 0912.00038].
- Securing threshold cryptosystems against chosen ciphertext attack
- Adaptively secure distributed PRFs from LWE
- Adaptively secure distributed public-key systems.
- Efficient forward-secure threshold public key encryption
- Adaptively secure distributed PRFs from \(\mathsf{LWE}\)
- Non-interactive CCA2-secure threshold cryptosystems: achieving adaptive security in the standard model without pairings
- Adaptively secure threshold symmetric-key encryption
- An efficient key authentication procedure for IND-CCA2 secure Paillier-based cryptosystem
- Adaptively secure non-interactive CCA-secure threshold cryptosystems: generic framework and constructions
- Computational fuzzy extractors
- Efficient hybrid encryption from ID-based encryption
- Efficient chosen-ciphertext secure certificateless threshold key encapsulation mechanism
- Threshold public key encryption scheme resilient against continual leakage without random oracles
- The reactive simulatability (RSIM) framework for asynchronous systems
- Tag-KEM/DEM: A new framework for hybrid encryption
- Protecting against key-exposure: strongly key-insulated encryption with optimal threshold
- Fuzzy asymmetric password-authenticated key exchange
- Constructions of dynamic and non-dynamic threshold public-key encryption schemes with decryption consistency
- Lattice-based identity-based resplittable threshold public key encryption scheme
- Ad-hoc threshold broadcast encryption with shorter ciphertexts
- Generic Construction of Chosen Ciphertext Secure Proxy Re-Encryption
- Threshold and revocation cryptosystems via extractable hash proofs
- Adaptively secure non-interactive threshold cryptosystems
- Born and raised distributively: fully distributed non-interactive adaptively-secure threshold signatures with short shares
- Threshold Public-Key Encryption with Adaptive Security and Short Ciphertexts
- Efficient threshold encryption from lossy trapdoor functions
- Dynamic threshold public-key encryption with decryption consistency from static assumptions
- Adaptive chosen ciphertext secure threshold key escrow scheme from pairing
- CCA2-Secure Threshold Broadcast Encryption with Shorter Ciphertexts
- Simplified Submission of Inputs to Protocols
- Dynamic Threshold Public-Key Encryption
- Fair Traceable Multi-Group Signatures
- Construction of Threshold (Hybrid) Encryption in the Random Oracle Model: How to Construct Secure Threshold Tag-KEM from Weakly Secure Threshold KEM
- Securing threshold cryptosystems against chosen ciphertext attack
- An Efficient Two-Party Public Key Cryptosystem Secure against Adaptive Chosen Ciphertext Attack
- scientific article; zbMATH DE number 2081075 (Why is no real title available?)
- scientific article; zbMATH DE number 1759644 (Why is no real title available?)
- Provably secure threshold public-key encryption with adaptive security and short ciphertexts
- Verifiable elections that scale for free
- A note on the security of KHL scheme
- Rational modular encoding in the DCR setting: non-interactive range proofs and Paillier-based Naor-Yung in the standard model
- Chosen-Ciphertext Secure Proxy Re-encryption without Pairings
- Topics in Cryptology – CT-RSA 2006
- Electronic jury voting protocols
- Encapsulated search index: public-key, sub-linear, distributed, and delegatable
- Chosen-ciphertext secure code-based threshold public key encryptions with short ciphertext
- Multi-recipient and threshold encryption based on hidden multipliers
- Accountability for misbehavior in threshold decryption via threshold traitor tracing
- Efficiently-thresholdizable batched identity based encryption, with applications
- Threshold PAKE with security against compromise of all servers
- Strongly secure universal thresholdizer
- Context-dependent threshold decryption and its applications
- HiSE: hierarchical (threshold) symmetric-key encryption
- Threshold public-key encryption: definitions, relations, and CPA-to-CCA transforms
- MATSE: amortized threshold symmetric-key encryption for matrices
- Efficient dynamic threshold identity-based encryption with constant-size ciphertext
- Extensions of access structures and their cryptographic applications
This page was built for publication: An efficient threshold public key cryptosystem secure against adaptive chosen ciphertext attack
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q4250756)
