Recent years have witnessed a significant development for functional encryption ( \(\textsf {FE}\) ) in the multi-user setting, particularly with multi-client functional encryption ( \(\textsf {MCFE}\) ). The challenge becomes more important when combined with access control, such as attribute-based encryption ( \(\textsf {ABE}\) ), which was actually not covered syntactically by the public-key \(\textsf {FE}\) nor semantically by the secret-key \(\textsf {MCFE}\) frameworks. On the other hand, as for complex primitives, many works have studied the admissibility of adversaries to ensure that the security model encompasses all real threats of attacks. In the end, our concrete \(\textsf {MCFE}\) leads to \(\textsf {MIFE}\) for inner products, public-key single-input inner-product \(\textsf {FE}\) with LSSS key-policy, and \(\textsf {KP}\) - \(\textsf {ABE}\) for LSSS, with adaptive security. Previous AB-MCFE constructions are either restricted in terms of weaker admissibility (Nguyen et al., ASIACRYPT’22) or considers a slightly larger functionality of attribute-weighted sum but with only selective security (Agrawal et al., CRYPTO’23).

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Multi-client Functional Encryption with Public Inputs and Strong Security

  • Ky Nguyen,
  • Duong Hieu Phan,
  • David Pointcheval

摘要

Recent years have witnessed a significant development for functional encryption ( \(\textsf {FE}\) ) in the multi-user setting, particularly with multi-client functional encryption ( \(\textsf {MCFE}\) ). The challenge becomes more important when combined with access control, such as attribute-based encryption ( \(\textsf {ABE}\) ), which was actually not covered syntactically by the public-key \(\textsf {FE}\) nor semantically by the secret-key \(\textsf {MCFE}\) frameworks. On the other hand, as for complex primitives, many works have studied the admissibility of adversaries to ensure that the security model encompasses all real threats of attacks. In the end, our concrete \(\textsf {MCFE}\) leads to \(\textsf {MIFE}\) for inner products, public-key single-input inner-product \(\textsf {FE}\) with LSSS key-policy, and \(\textsf {KP}\) - \(\textsf {ABE}\) for LSSS, with adaptive security. Previous AB-MCFE constructions are either restricted in terms of weaker admissibility (Nguyen et al., ASIACRYPT’22) or considers a slightly larger functionality of attribute-weighted sum but with only selective security (Agrawal et al., CRYPTO’23).