Certificateless Encryption Supporting Multi-Ciphertext Equality Test with Proxy-Assisted Authorization
Public key encryption with equality test (PKEET) is a cryptographic primitive that enables a tester to determine, without decryption, whether two ciphertexts encrypted with different public keys generate from the same message. In previous research, public key encryption with equality test (PKEET) wa...
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2023-10-01
|
| Series: | Electronics |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2079-9292/12/20/4326 |
| _version_ | 1797573978918748160 |
|---|---|
| author | Siyue Dong Zhen Zhao Baocang Wang Wen Gao Shanshan Zhang |
| author_facet | Siyue Dong Zhen Zhao Baocang Wang Wen Gao Shanshan Zhang |
| author_sort | Siyue Dong |
| collection | DOAJ |
| description | Public key encryption with equality test (PKEET) is a cryptographic primitive that enables a tester to determine, without decryption, whether two ciphertexts encrypted with different public keys generate from the same message. In previous research, public key encryption with equality test (PKEET) was extended to include identity-based encryption with equality test (IBEET), thereby broadening the application of PKEET. Subsequently, certificateless encryption with equality test (CLEET) was introduced to address the key escrow problem in IBEET. However, existing CLEET schemes suffer from inefficiency and potential information leakage when dealing with multiple ciphertexts due to the need for pairwise equality tests. To address this issue, we propose a concept of certificateless encryption supporting multi-ciphertext equality test with proxy-assisted authorization (CLE-MET-PA). CLE-MET-PA incorporates the functionality of the multi-ciphertext equality test into CLEET, enabling a tester to perform a single equality test on multiple ciphertexts to determine whether the underlying plaintexts are equal, without revealing any additional information. This enhances the security of our scheme while significantly reducing the computational overhead compared to multiple pairwise equality tests, making our scheme more efficient. Additionally, our approach integrates proxy-assisted authorization, allowing users to delegate a proxy to grant authorizations for equality tests on their behalf when offline. Importantly, the proxy token used in our scheme does not include any portion of the user’s private key, providing enhanced protection compared to traditional PKEET schemes in which the user token is often part of the user’s private key. We construct a concrete CLE-MET-PA scheme and prove that it achieves CPA security and attains CCA security through an FO transformation. |
| first_indexed | 2024-03-10T21:17:46Z |
| format | Article |
| id | doaj.art-9abaf7779b014c6592ab7cd0b5aa487f |
| institution | Directory Open Access Journal |
| issn | 2079-9292 |
| language | English |
| last_indexed | 2024-03-10T21:17:46Z |
| publishDate | 2023-10-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Electronics |
| spelling | doaj.art-9abaf7779b014c6592ab7cd0b5aa487f2023-11-19T16:20:05ZengMDPI AGElectronics2079-92922023-10-011220432610.3390/electronics12204326Certificateless Encryption Supporting Multi-Ciphertext Equality Test with Proxy-Assisted AuthorizationSiyue Dong0Zhen Zhao1Baocang Wang2Wen Gao3Shanshan Zhang4The State Key Laboratory of Integrated Service Networks, Xidian University, Xi’an 710071, ChinaThe State Key Laboratory of Integrated Service Networks, Xidian University, Xi’an 710071, ChinaThe State Key Laboratory of Integrated Service Networks, Xidian University, Xi’an 710071, ChinaSchool of Cyberspace Security, Xi’an University of Posts & Telecommunications, Xi’an 710121, ChinaSchool of Mathematics and Information Science, Baoji University of Arts and Science, Xi’an 721016, ChinaPublic key encryption with equality test (PKEET) is a cryptographic primitive that enables a tester to determine, without decryption, whether two ciphertexts encrypted with different public keys generate from the same message. In previous research, public key encryption with equality test (PKEET) was extended to include identity-based encryption with equality test (IBEET), thereby broadening the application of PKEET. Subsequently, certificateless encryption with equality test (CLEET) was introduced to address the key escrow problem in IBEET. However, existing CLEET schemes suffer from inefficiency and potential information leakage when dealing with multiple ciphertexts due to the need for pairwise equality tests. To address this issue, we propose a concept of certificateless encryption supporting multi-ciphertext equality test with proxy-assisted authorization (CLE-MET-PA). CLE-MET-PA incorporates the functionality of the multi-ciphertext equality test into CLEET, enabling a tester to perform a single equality test on multiple ciphertexts to determine whether the underlying plaintexts are equal, without revealing any additional information. This enhances the security of our scheme while significantly reducing the computational overhead compared to multiple pairwise equality tests, making our scheme more efficient. Additionally, our approach integrates proxy-assisted authorization, allowing users to delegate a proxy to grant authorizations for equality tests on their behalf when offline. Importantly, the proxy token used in our scheme does not include any portion of the user’s private key, providing enhanced protection compared to traditional PKEET schemes in which the user token is often part of the user’s private key. We construct a concrete CLE-MET-PA scheme and prove that it achieves CPA security and attains CCA security through an FO transformation.https://www.mdpi.com/2079-9292/12/20/4326public key encryption with equality testcertificateless encryptionmulti-ciphertext equality test |
| spellingShingle | Siyue Dong Zhen Zhao Baocang Wang Wen Gao Shanshan Zhang Certificateless Encryption Supporting Multi-Ciphertext Equality Test with Proxy-Assisted Authorization Electronics public key encryption with equality test certificateless encryption multi-ciphertext equality test |
| title | Certificateless Encryption Supporting Multi-Ciphertext Equality Test with Proxy-Assisted Authorization |
| title_full | Certificateless Encryption Supporting Multi-Ciphertext Equality Test with Proxy-Assisted Authorization |
| title_fullStr | Certificateless Encryption Supporting Multi-Ciphertext Equality Test with Proxy-Assisted Authorization |
| title_full_unstemmed | Certificateless Encryption Supporting Multi-Ciphertext Equality Test with Proxy-Assisted Authorization |
| title_short | Certificateless Encryption Supporting Multi-Ciphertext Equality Test with Proxy-Assisted Authorization |
| title_sort | certificateless encryption supporting multi ciphertext equality test with proxy assisted authorization |
| topic | public key encryption with equality test certificateless encryption multi-ciphertext equality test |
| url | https://www.mdpi.com/2079-9292/12/20/4326 |
| work_keys_str_mv | AT siyuedong certificatelessencryptionsupportingmulticiphertextequalitytestwithproxyassistedauthorization AT zhenzhao certificatelessencryptionsupportingmulticiphertextequalitytestwithproxyassistedauthorization AT baocangwang certificatelessencryptionsupportingmulticiphertextequalitytestwithproxyassistedauthorization AT wengao certificatelessencryptionsupportingmulticiphertextequalitytestwithproxyassistedauthorization AT shanshanzhang certificatelessencryptionsupportingmulticiphertextequalitytestwithproxyassistedauthorization |