TY - GEN
T1 - Certificateless public key encryption in the selective-ID security model (without random oracles)
AU - Park, Jong Hwan
AU - Choi, Kyu Young
AU - Hwang, Jung Yeon
AU - Lee, Dong Hoon
PY - 2007
Y1 - 2007
N2 - The concept of Certificateless Public Key Encryption (CLPKE) eliminates the use of certificates in certified Public Key Encryption (PKE) scheme and the key-escrow problem in Identity Based Encryption (IBE) scheme. Al-Riyami and Paterson first proposed a CL-PKE scheme and proved its security in their security model (AP-model) using idealized random oracles. Several generic constructions were also proposed to construct a CL-PKE scheme by composing the standard PKE and IBE schemes. Recently, it was proved that some generic constructions are not secure against chosen ciphertext attacks in light of the security goals in the AP-model. In this paper, we show that all the known generic constructions are not secure against chosen ciphertext attacks, in the AP-model or a weaker security model than the AP-model. We also propose a CL-PKE scheme which is provably secure against chosen ciphertext attacks without random oracles. Our construction is proven secure in the selective-ID security model, reflecting the feature of CL-PKE scheme.
AB - The concept of Certificateless Public Key Encryption (CLPKE) eliminates the use of certificates in certified Public Key Encryption (PKE) scheme and the key-escrow problem in Identity Based Encryption (IBE) scheme. Al-Riyami and Paterson first proposed a CL-PKE scheme and proved its security in their security model (AP-model) using idealized random oracles. Several generic constructions were also proposed to construct a CL-PKE scheme by composing the standard PKE and IBE schemes. Recently, it was proved that some generic constructions are not secure against chosen ciphertext attacks in light of the security goals in the AP-model. In this paper, we show that all the known generic constructions are not secure against chosen ciphertext attacks, in the AP-model or a weaker security model than the AP-model. We also propose a CL-PKE scheme which is provably secure against chosen ciphertext attacks without random oracles. Our construction is proven secure in the selective-ID security model, reflecting the feature of CL-PKE scheme.
KW - Bilinear maps
KW - Certificateless public key encryption
KW - Chosen ciphertext security
UR - http://www.scopus.com/inward/record.url?scp=50049104871&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=50049104871&partnerID=8YFLogxK
U2 - 10.1007/978-3-540-73489-5_5
DO - 10.1007/978-3-540-73489-5_5
M3 - Conference contribution
AN - SCOPUS:50049104871
SN - 3540734880
SN - 9783540734888
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 60
EP - 82
BT - Pairing-Based Cryptography - Pairing 2007 - First International Conference, Proceedings
T2 - 1st International Conference on Pairing-Based Cryptography, Pairing 2007
Y2 - 2 July 2007 through 4 July 2007
ER -