Cryptology ePrint Archive: Report 2015/921

Identity-Based Revocation from Subset Difference Methods under Simple Assumptions

Kwangsu Lee and Jong Hwan Park

Abstract: Identity-based revocation (IBR) is a specific kind of broadcast encryption that can effectively send a ciphertext to a set of receivers. In IBR, a ciphertext is associated with a set of revoked users instead of a set of receivers and the maximum number of users in the system can be an exponential value in the security parameter. In this paper, we reconsider the general method of Lee, Koo, Lee, and Park (ESORICS 2014) that constructs a public-key revocation (PKR) scheme by combining the subset difference (SD) method of Naor, Naor, and Lotspiech (CRYPTO 2001) and a single revocation encryption (SRE) scheme. Lee et al. left it as an open problem to construct an SRE scheme under the standard assumption without random oracles. In this work, we first propose a selectively secure SRE scheme under the standard assumption without random oracles. Next, we propose a fully secure SRE scheme under simple static assumptions without random oracles. Finally, we present an efficient IBR scheme derived from the SD method and our SRE scheme. The security of our IBR scheme depends on that of the underlying SRE scheme.

Category / Keywords: public-key cryptography / Broadcast encryption, Identity-based revocation, Subset cover framework, Bilinear maps

Date: received 22 Sep 2015

Contact author: guspin at korea ac kr

Available format(s): PDF | BibTeX Citation

Version: 20150922:210120 (All versions of this report)

Short URL: ia.cr/2015/921

Discussion forum: Show discussion | Start new discussion