Fully Key-Homomorphic Encryption, Arithmetic Circuit ABE and Compact Garbled Circuits
Name
V_Fully key.pdf
Size
600 KB
Format
Adobe PDF
Checksum (MD5)
71b2c624f3118031da1412ad7c44833b
Author(s)
Boneh, Dan
Gentry, Craig
Gorbunov, Sergey
Halevi, Shai
Nikolaenko, Valeria
Segev, Gil
Vaikuntanathan, Vinod
Vinayagamurthy, Dhinakaran
Date Issued
2014
Journal
Advances in Cryptology – EUROCRYPT 2014
Publisher
Springer-Verlag
Citation
Boneh, Dan, Craig Gentry, Sergey Gorbunov, Shai Halevi, Valeria Nikolaenko, Gil Segev, Vinod Vaikuntanathan, and Dhinakaran Vinayagamurthy. “Fully Key-Homomorphic Encryption, Arithmetic Circuit ABE and Compact Garbled Circuits.” Lecture Notes in Computer Science (2014): 533–556.
Version
Author's final manuscript
Abstract
We construct the first (key-policy) attribute-based encryption (ABE) system with short secret keys: the size of keys in our system depends only on the depth of the policy circuit, not its size. Our constructions extend naturally to arithmetic circuits with arbitrary fan-in gates thereby further reducing the circuit depth. Building on this ABE system we obtain the first reusable circuit garbling scheme that produces garbled circuits whose size is the same as the original circuit plus an additive poly(λ,d) bits, where λ is the security parameter and d is the circuit depth. All previous constructions incurred a multiplicative poly(λ) blowup.
We construct our ABE using a new mechanism we call fully key-homomorphic encryption, a public-key system that lets anyone translate a ciphertext encrypted under a public-key x into a ciphertext encrypted under the public-key (f(x),f) of the same plaintext, for any efficiently computable f. We show that this mechanism gives an ABE with short keys. Security of our construction relies on the subexponential hardness of the learning with errors problem.
We also present a second (key-policy) ABE, using multilinear maps, with short ciphertexts: an encryption to an attribute vector x is the size of x plus poly(λ,d) additional bits. This gives a reusable circuit garbling scheme where the garbled input is short.
MIT Department
Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Terms of Use
Creative Commons Attribution-Noncommercial-Share Alike
Persistent DSpace Link
DOI of Published Version
https://doi.org/10.1007/978-3-642-55220-5_30
