Paper 2024/1779

Secure Pairing-Free IBE and CP-ABE from Inner-Product Functional Encryption

Ahmad Khoureich Ka, Université Alioune Diop de Bambey, Senegal
Abstract

The potential of Attribute-Based Encryption (ABE) in the context of IoT has driven researchers to propose pairing-free ABE schemes that are suitable for resource-constrained devices. Unfortunately, many of these schemes turned out to be insecure. This fact seems to reinforce the point of view of some researchers according to which instantiating an Identity-Based Encryption (IBE) in plain Decisional Diffie-Hellman (DDH) groups is impossible. In this paper, we provide a generic Ciphertext-Policy ABE (CP-ABE) scheme with secret AND gate policy from Inner-Product Functional Encryption (IPFE). We also propose an instantiation of that generic CP-ABE scheme from the DDH assumption. From our generic CP-ABE scheme we derive an IBE scheme by introducing the concept of Clustered Identity-Based Encryption (CIBE). Our schemes show that it is possible to construct secure IBE and ABE schemes based on the classical DDH assumption. An implementation of our CIBE in Python using the Charm framework is available on GitHub.

Metadata
Available format(s)
PDF
Category
Public-key cryptography
Publication info
Published elsewhere. Minor revision. ISCISC 2025
Keywords
Identity-Based EncryptionAttribute-Based EncryptionInner-Product Functional EncryptionDecisional Diffie-Hellman.
Contact author(s)
ahmadkhoureich ka @ uadb edu sn
History
2025-11-12: last of 5 revisions
2024-10-31: received
See all versions
Short URL
https://ia.cr/2024/1779
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2024/1779,
      author = {Ahmad Khoureich Ka},
      title = {Secure Pairing-Free {IBE} and {CP}-{ABE} from Inner-Product Functional Encryption},
      howpublished = {Cryptology {ePrint} Archive, Paper 2024/1779},
      year = {2024},
      url = {https://eprint.iacr.org/2024/1779}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.