Adaptive Security in Broadcast Encryption Systems

Craig Gentry; Brent Waters

Paper 2008/268

Adaptive Security in Broadcast Encryption Systems

Craig Gentry and Brent Waters

Abstract

We present new techniques for achieving adaptive security in broadcast encryption systems. Previous work on fully-collusion resistant broadcast encryption with short ciphertexts was limited to only considering static security. First, we present a new definition of security that we call semi-static security and show a generic ``two-key" transformation from semi-statically secure systems to adaptively secure ones that have comparable-sized ciphertexts. Using bilinear maps, we then construct broadcast encryption systems that are semi-statically secure in the standard model and have constant size ciphertexts. Our semi-static constructions work when the number of indices or identifiers in the system is polynomial in the security parameter. For identity-based broadcast encryption, where the number of potential indices or identifiers may be exponential, we present the first adaptively secure system with sublinear ciphertexts. We prove security in the standard model.

Metadata

Available format(s): PDF
Publication info: Published elsewhere. Unknown where it was published
Contact author(s): bwaters @ csl sri com
History: 2008-06-23: revised; 2008-06-18: received; See all versions
Short URL: https://ia.cr/2008/268
License: CC BY

BibTeX

@misc{cryptoeprint:2008/268,
      author = {Craig Gentry and Brent Waters},
      title = {Adaptive Security in Broadcast Encryption Systems},
      howpublished = {Cryptology {ePrint} Archive, Paper 2008/268},
      year = {2008},
      url = {https://eprint.iacr.org/2008/268}
}