Cryptology ePrint Archive: Report 2021/862

Receiver-Anonymity in Rerandomizable RCCA-Secure Cryptosystems Resolved

Yi Wang and Rongmao Chen and Guomin Yang and Xinyi Huang and Baosheng Wang and Moti Yung

Abstract: In this work we resolve the open problem raised by Prabhakaran and Rosulek at CRYPTO 2007, and present the first anonymous, rerandomizable, Replayable-CCA (RCCA) secure public-key encryption scheme. This solution opens the door to numerous privacy-oriented applications with a highly desired RCCA security level. At the core of our construction is a non-trivial extension of smooth projective hash functions (Cramer and Shoup, EUROCRYPT 2002), and a modular generic framework developed for constructing rerandomizable RCCA-secure encryption schemes with receiver-anonymity. The framework gives an enhanced abstraction of the original Prabhakaran and Rosulek's scheme (which was the first construction of rerandomizable RCCA-secure encryption in the standard model), where the most crucial enhancement is the first realization of the desirable property of receiver-anonymity, essential to privacy settings. It also serves as a conceptually more intuitive and generic understanding of RCCA security, which leads, for example, to new implementations of the notion. Finally, note that (since CCA security is not applicable to the privacy applications motivating our work) the concrete results and the conceptual advancement presented here, seem to substantially expand the power and relevance of the notion of rerandomizable RCCA-secure encryption.

Category / Keywords: public-key cryptography / RCCA security; receiver-anonymity; smooth projective hash function

Original Publication (with minor differences): IACR-CRYPTO-2021

Date: received 23 Jun 2021

Contact author: wangyi14 at nudt edu cn, chromao at nudt edu cn

Available format(s): PDF | BibTeX Citation

Version: 20210624:150625 (All versions of this report)

Short URL: ia.cr/2021/862


[ Cryptology ePrint archive ]