論文

査読有り
2018年8月1日

Chosen ciphertext secure keyed-homomorphic public-key cryptosystems

Designs, Codes, and Cryptography
  • Keita Emura
  • ,
  • Goichiro Hanaoka
  • ,
  • Koji Nuida
  • ,
  • Go Ohtake
  • ,
  • Takahiro Matsuda
  • ,
  • Shota Yamada

86
8
開始ページ
1623
終了ページ
1683
記述言語
英語
掲載種別
研究論文(学術雑誌)
DOI
10.1007/s10623-017-0417-6
出版者・発行元
Springer New York LLC

In homomorphic encryption schemes, anyone can perform homomorphic operations, and therefore, it is difficult to manage when, where and by whom they are performed. In addition, the property that anyone can “freely” perform the operation inevitably means that ciphertexts are malleable, and it is well-known that adaptive chosen ciphertext (CCA) security and the homomorphic property can never be achieved simultaneously. In this paper, we show that CCA security and the homomorphic property can be simultaneously handled in situations that the user(s) who can perform homomorphic operations on encrypted data should be controlled/limited, and propose a new concept of homomorphic public-key encryption, which we call keyed-homomorphic public-key encryption (KH-PKE). By introducing a secret key for homomorphic operations, we can control who is allowed to perform the homomorphic operation. To construct KH-PKE schemes, we introduce a new concept, transitional universal property, and present a practical KH-PKE scheme with multiplicative homomorphic operations from the decisional Diffie-Hellman (DDH) assumption. For ℓ-bit security, our DDH-based KH-PKE scheme yields only ℓ-bit longer ciphertext size than that of the Cramer–Shoup PKE scheme. Finally, we consider an identity-based analogue of KH-PKE, called keyed-homomorphic identity-based encryption and give its concrete construction from the Gentry IBE scheme.

リンク情報
DOI
https://doi.org/10.1007/s10623-017-0417-6
URL
http://dblp.uni-trier.de/db/journals/dcc/dcc86.html#journals/dcc/EmuraHNOMY18

エクスポート
BibTeX RIS