Paper 2021/1172

Systematizing Core Properties of Pairing-Based Attribute-Based Encryption to Uncover Remaining Challenges in Enforcing Access Control in Practice

Marloes Venema, Greg Alpár, and Jaap-Henk Hoepman

Abstract

Attribute-based encryption (ABE) cryptographically implements fine-grained access control on data. As such, data can be stored by an entity that is not necessarily trusted to enforce access control, or an entity that is not even trusted to have access to the plaintext data at all. Instead, access control can be externally enforced by a trusted entity. Additionally, some multi-authority variants of ABE---which do not have a central authority---can effectively and securely implement access control in multiple-domain settings. Furthermore, ABE is the only cryptographic approach to fine-grained access control that does not require an online trusted third party during access requests, and thus provides better availability properties. The actual realization of these theoretical advantages in practice depends on whether current state-of-the-art ABE schemes support the necessary core properties. Much progress has been made in the last two decades in pairing-based ABE schemes, owing to their versatility and efficiency. In fact, it is possible to support most core properties under strong security guarantees, while incurring acceptable storage and computational costs. It is therefore a good time to ask ourselves whether pairing-based ABE has reached its full practical potential. To answer this question, we provide a comprehensive systematized overview of various existing pairing-based ABE schemes and their core properties. We also investigate the relationship between these core properties and real-world access control requirements. We show that a few challenges remain, that must be overcome for ABE to reach its full potential as a mechanism to implement efficient and secure access control in practice.

Metadata
Available format(s)
PDF
Category
Public-key cryptography
Publication info
Preprint. MINOR revision.
Keywords
attribute-based encryptionaccess controlsystematization of knowledge
Contact author(s)
m venema @ cs ru nl
g alpar @ cs ru nl
jhh @ cs ru nl
History
2022-03-21: revised
2021-09-14: received
See all versions
Short URL
https://ia.cr/2021/1172
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2021/1172,
      author = {Marloes Venema and Greg Alpár and Jaap-Henk Hoepman},
      title = {Systematizing Core Properties of Pairing-Based Attribute-Based Encryption to Uncover Remaining Challenges in Enforcing Access Control in Practice},
      howpublished = {Cryptology {ePrint} Archive, Paper 2021/1172},
      year = {2021},
      url = {https://eprint.iacr.org/2021/1172}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.