Paper 2019/1409

Cloud-assisted Asynchronous Key Transport with Post-Quantum Security

Gareth T. Davies, Herman Galteland, Kristian Gjøsteen, and Yao Jiang


In cloud-based outsourced storage systems, many users wish to securely store their files for later retrieval, and additionally to share them with other users. These retrieving users may not be online at the point of the file upload, and in fact they may never come online at all. In this asynchoronous environment, key transport appears to be at odds with any demands for forward secrecy. Recently, Boyd et al. (ISC 2018) presented a protocol that allows an initiator to use a modified key encapsulation primitive, denoted a blinded KEM (BKEM), to transport a file encryption key to potentially many recipients via the (untrusted) storage server, in a way that gives some guarantees of forward secrecy. Until now all known constructions of BKEMs are built using RSA and DDH, and thus are only secure in the classical setting. We further the understanding of the use of blinding in post-quantum cryptography in two aspects. First, we show how to generically build blinded KEMs from homomorphic encryption schemes with certain properties. Second, we construct the first post-quantum secure blinded KEMs, and the security of our constructions are based on hard lattice problems.

Note: This iteration is the Full version of a paper published at ACISP 2020.

Available format(s)
Public-key cryptography
Publication info
Published elsewhere. MINOR revision.ACISP 2020
Lattice-based cryptographyNTRUGroup Key ExchangeBlinded Key EncapsulationForward SecrecyCloud StoragePost-quantum cryptography
Contact author(s)
yao jiang @ ntnu no
2020-05-26: revised
2019-12-05: received
See all versions
Short URL
Creative Commons Attribution


      author = {Gareth T.  Davies and Herman Galteland and Kristian Gjøsteen and Yao Jiang},
      title = {Cloud-assisted Asynchronous Key Transport with Post-Quantum Security},
      howpublished = {Cryptology ePrint Archive, Paper 2019/1409},
      year = {2019},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.