SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test
Public key encryption with equality test (PKEET) is a cryptographic primitive that enables a tester to determine whether two ciphertexts encrypted with same or different public keys have been generated from the same message without decryption. Previous studies extended PKEET to public key encryption...
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2024-03-01
|
| Series: | Electronics |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2079-9292/13/7/1256 |
| _version_ | 1797212711384252416 |
|---|---|
| author | Siyue Dong Zhen Zhao Baocang Wang Wen Gao Shanshan Zhang |
| author_facet | Siyue Dong Zhen Zhao Baocang Wang Wen Gao Shanshan Zhang |
| author_sort | Siyue Dong |
| collection | DOAJ |
| description | Public key encryption with equality test (PKEET) is a cryptographic primitive that enables a tester to determine whether two ciphertexts encrypted with same or different public keys have been generated from the same message without decryption. Previous studies extended PKEET to public key encryption with designated-position fuzzy equality test (PKE-DFET), enabling testers to verify whether plaintexts corresponding to two ciphertexts are equal while ignoring specific bits at designated positions. In this work, we have filled the research gap in the identity-based encryption (IBE) cryptosystems for this primitive. Furthermore, although our authorization method is the all-or-nothing (AoN) type, it overcomes the shortcomings present in the majority of AoN-type authorization schemes. In our scheme, equality tests can only be performed between a ciphertext and a given plaintext. Specifically, even if a tester acquires multiple AoN-type authorizations, it cannot conduct unpermitted equality tests between users. This significantly reduces the risk of user privacy leaks when handling sensitive information in certain scenarios, while still retaining the flexible and simple characteristics of AoN-type authorizations. We use the Chinese national cryptography standard SM9-IBE algorithm to provide the concrete construction of our scheme, enhancing the usability and security of our scheme, while making deployment more convenient. Finally, we prove that our scheme achieves F-OW-ID-CCA security when the adversary has the trapdoor of the challenge ciphertext, and achieves IND-ID-CCA security when the adversary does not have the trapdoor of the challenge ciphertext. |
| first_indexed | 2024-04-24T10:46:43Z |
| format | Article |
| id | doaj.art-7b6ccd2c9e9a4f47bf9d620a3b8e23f6 |
| institution | Directory Open Access Journal |
| issn | 2079-9292 |
| language | English |
| last_indexed | 2024-04-24T10:46:43Z |
| publishDate | 2024-03-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Electronics |
| spelling | doaj.art-7b6ccd2c9e9a4f47bf9d620a3b8e23f62024-04-12T13:17:12ZengMDPI AGElectronics2079-92922024-03-01137125610.3390/electronics13071256SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality TestSiyue Dong0Zhen Zhao1Baocang Wang2Wen Gao3Shanshan Zhang4The State Key Laboratory of Integrated Service Networks, Xidian University, Xi’an 710071, ChinaThe State Key Laboratory of Integrated Service Networks, Xidian University, Xi’an 710071, ChinaThe State Key Laboratory of Integrated Service Networks, Xidian University, Xi’an 710071, ChinaSchool of Cyberspace Security, Xi’an University of Posts & Telecommunications, Xi’an 710121, ChinaSchool of Mathematics and Information Science, Baoji University of Arts and Science, Baoji 721016, ChinaPublic key encryption with equality test (PKEET) is a cryptographic primitive that enables a tester to determine whether two ciphertexts encrypted with same or different public keys have been generated from the same message without decryption. Previous studies extended PKEET to public key encryption with designated-position fuzzy equality test (PKE-DFET), enabling testers to verify whether plaintexts corresponding to two ciphertexts are equal while ignoring specific bits at designated positions. In this work, we have filled the research gap in the identity-based encryption (IBE) cryptosystems for this primitive. Furthermore, although our authorization method is the all-or-nothing (AoN) type, it overcomes the shortcomings present in the majority of AoN-type authorization schemes. In our scheme, equality tests can only be performed between a ciphertext and a given plaintext. Specifically, even if a tester acquires multiple AoN-type authorizations, it cannot conduct unpermitted equality tests between users. This significantly reduces the risk of user privacy leaks when handling sensitive information in certain scenarios, while still retaining the flexible and simple characteristics of AoN-type authorizations. We use the Chinese national cryptography standard SM9-IBE algorithm to provide the concrete construction of our scheme, enhancing the usability and security of our scheme, while making deployment more convenient. Finally, we prove that our scheme achieves F-OW-ID-CCA security when the adversary has the trapdoor of the challenge ciphertext, and achieves IND-ID-CCA security when the adversary does not have the trapdoor of the challenge ciphertext.https://www.mdpi.com/2079-9292/13/7/1256public key encryption with equality testidentity-based cryptographydesignated-position fuzzy equality test |
| spellingShingle | Siyue Dong Zhen Zhao Baocang Wang Wen Gao Shanshan Zhang SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test Electronics public key encryption with equality test identity-based cryptography designated-position fuzzy equality test |
| title | SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test |
| title_full | SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test |
| title_fullStr | SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test |
| title_full_unstemmed | SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test |
| title_short | SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test |
| title_sort | sm9 identity based encryption with designated position fuzzy equality test |
| topic | public key encryption with equality test identity-based cryptography designated-position fuzzy equality test |
| url | https://www.mdpi.com/2079-9292/13/7/1256 |
| work_keys_str_mv | AT siyuedong sm9identitybasedencryptionwithdesignatedpositionfuzzyequalitytest AT zhenzhao sm9identitybasedencryptionwithdesignatedpositionfuzzyequalitytest AT baocangwang sm9identitybasedencryptionwithdesignatedpositionfuzzyequalitytest AT wengao sm9identitybasedencryptionwithdesignatedpositionfuzzyequalitytest AT shanshanzhang sm9identitybasedencryptionwithdesignatedpositionfuzzyequalitytest |