Cryptology ePrint Archive: Report 2019/912

Fine-Grained Forward Secrecy: Allow-List/Deny-List Encryption and Applications

David Derler and Sebastian Ramacher and Daniel Slamanig and Christoph Striecks

Abstract: Forward secrecy is an important feature for modern cryptographic systems and is widely used in secure messaging such as Signal and WhatsApp as well as in common Internet protocols such as TLS, IPSec, or SSH. The benefit of forward secrecy is that the damage in case of key-leakage is mitigated. Forward-secret encryption schemes provide security of past ciphertexts even if a secret key leaks, which is interesting in settings where cryptographic keys often reside in memory for quite a long time and could be extracted by an adversary, e.g., in cloud computing. The recent concept of puncturable encryption (PE; Green and Miers, IEEE S&P'15) provides a versatile generalization of forward-secret encryption: it allows to puncture secret keys with respect to ciphertexts to prevent the future decryption of these ciphertexts.

We introduce the abstraction of allow-list/deny-list encryption schemes and classify different types of PE schemes using this abstraction. Based on our classification, we identify and close a gap in existing work by introducing a novel variant of PE which we dub Dual-Form Puncturable Encryption (DFPE). DFPE significantly enhances and, in particular, generalizes previous variants of PE by allowing an interleaved application of allow- and deny-list operations.

We present a construction of DFPE in prime-order bilinear groups, discuss a direct application of DPFE for enhancing security guarantees within Cloudflare's Geo Key Manager, and show its generic use to construct forward-secret IBE and forward-secret digital signatures.

Category / Keywords: public-key cryptography / puncturable encryption, forward secrecy

Original Publication (with major differences): Financial Cryptography and Data Security 25th International Conference, FC 2021, Revised Selected Papers, LNCS, Springer

Date: received 8 Aug 2019, last revised 31 Mar 2021

Contact author: david at dfinity org, sebastian ramacher at ait ac at, daniel slamanig at ait ac at, christoph striecks at ait ac at

Available format(s): PDF | BibTeX Citation

Note: Full version of a paper which appears in Financial Cryptography and Data Security 25th International Conference, FC 2021, Revised Selected Papers, LNCS, Springer. (Compared to prior versions, many parts are updated.)

Version: 20210331:090526 (All versions of this report)

Short URL:

[ Cryptology ePrint archive ]