[PDF][PDF] On the Relation between Identity-Based Proxy Re-Encryption and Mediated Identity-Based Encryption.
Identity-based proxy re-encryption (IBPRE) is a useful primitive, in the sense that a semi-trust
proxy can translate ciphertexts originally intended for one identity into ciphertexts intended
for another identity. The proxy, however, cannot learn anything about the underlying
plaintexts. Mediated identity-based encryption (MIBE), introduced by Ding et al., is
particularly useful for the immediate revocation of identities. In this paper, we study the
relation between IBPRE and MIBE. We show that, under the chosenplaintext attack (CPA) …
proxy can translate ciphertexts originally intended for one identity into ciphertexts intended
for another identity. The proxy, however, cannot learn anything about the underlying
plaintexts. Mediated identity-based encryption (MIBE), introduced by Ding et al., is
particularly useful for the immediate revocation of identities. In this paper, we study the
relation between IBPRE and MIBE. We show that, under the chosenplaintext attack (CPA) …
Identity-based proxy re-encryption (IBPRE) is a useful primitive, in the sense that a semi-trust proxy can translate ciphertexts originally intended for one identity into ciphertexts intended for another identity. The proxy, however, cannot learn anything about the underlying plaintexts. Mediated identity-based encryption (MIBE), introduced by Ding et al., is particularly useful for the immediate revocation of identities. In this paper, we study the relation between IBPRE and MIBE. We show that, under the chosenplaintext attack (CPA), IBPRE and MIBE are equivalent: we give a generic construction of CPA-secure IBPRE scheme from any CPA-secure MIBE scheme; and a generic construction for the opposite direction is also given. However, under the chosen-ciphertext attack (CCA), we show that IBPRE and MIBE are not equivalent: for an IBPRE scheme generically constructed from CCA-secure MIBE, we can give a concrete attack against this resulting IBPRE scheme; similarly, we also give a concrete attack against the MIBE scheme generically constructed from CCA-secure IBPRE. We believe that our results are theoretically interesting, since for the first time they clarify the relation between IBPRE and MIBE.
researchgate.net
Showing the best result for this search. See all results