Paper 2012/216

Adaptive CCA Broadcast Encryption with Constant-Size Secret Keys and Ciphertexts

Duong-Hieu Phan, David Pointcheval, Siamak F. Shahandashti, and Mario Strefler


We consider designing broadcast encryption schemes with constant-size secret keys and ciphertexts, achieving chosen-ciphertext security. We first argue that known CPA-to-CCA transforms currently do not yield such schemes. We then propose a scheme, modifying a previous selective CPA secure proposal by Boneh, Gentry, and Waters. Our proposed scheme has constant-size secret keys and ciphertexts and we prove that it is selective chosen-ciphertext secure based on standard assumptions. Our scheme has ciphertexts that are shorter than those of the previous CCA secure proposals. Then we propose a second scheme that provides the functionality of both broadcast encryption and revocation schemes simultaneously using the same set of parameters. Finally we show that it is possible to prove our first scheme adaptive chosen-ciphertext secure under reasonable extensions of the bilinear Diffie-Hellman exponent and the knowledge of exponent assumptions. We prove both of these extended assumptions in the generic group model. Hence, our scheme becomes the first to achieve constant-size secret keys and ciphertexts (both asymptotically optimal) and adaptive chosen-ciphertext security at the same time.

Available format(s)
Public-key cryptography
Publication info
Published elsewhere. ACISP 2012
Broadcast EncryptionAdaptive CCA SecurityRevocation SchemeGBDHE Assumption
Contact author(s)
siamak f s @ gmail com
2012-07-24: last of 2 revisions
2012-04-22: received
See all versions
Short URL
Creative Commons Attribution


      author = {Duong-Hieu Phan and David Pointcheval and Siamak F.  Shahandashti and Mario Strefler},
      title = {Adaptive CCA Broadcast Encryption with Constant-Size Secret Keys and Ciphertexts},
      howpublished = {Cryptology ePrint Archive, Paper 2012/216},
      year = {2012},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.