# Example describing Baek and Zheng’s threshold identity-based decryption scheme

I am trying to work through an example of Baek and Zheng’s “threshold identity-based decryption scheme” and I tried a lot to solve this, but somewhere I’m doing something wrong.

I hope someone can help me rectify my error, telling me where I might be making a mistake. Example:

Let $q=11,$
$\mathbb{G}=\mathbb{Z}_{11}=\{0,1,2,3,4,5,6,7,8,9,10\},\\ P=1,$
$\mathbb{G}_T=\text{Quadratic residues of }\mathbb{Z}_{23}=\mathbb{Z}^*/23=\{1,2,3,4,6,8,9,12,13,16,18\}$,

$e(x,y)=3^{xy} \bmod{23}$
$H_1(x)= x \bmod{11}\\ H_2(x) = x \text{ in binary}\\ H_3(x,y)=xy \bmod{11}$

Let $s=4$, then $PK=sP=4$. Example :

Let $n=7$,

$SG=\{P_1,P_2,P_3,\cdots,P_7\}$,

$t´=3$,

$ID_{SG}=14$

Now, $SK_{SG}=sH_1(ID_{SG}) = 4*3 \equiv 1 \mod 11$

$$R(z)=1+2z+3z^2$$

Let $i$ be the public identity for $P_i$.

Now, $$[SK_{SG}]_1 = R(1) =6,\\ [SK_{SG}]_2 = R(2) =6,\\ [SK_{SG}]_3 = R(3) =1,\\ [SK_{SG}]_4 = R(4) =2,\\ [SK_{SG}]_5 = R(5) =9,\\ [SK_{SG}]_6 = R(6) =0,\\ [SK_{SG}]_7 = R(7) =8$$ Example:

Let $\ell=5,$

$m =(11101)_2,$

$r=4$

Now, $$k=e(4,3)^4 = 5$$

$$U=rP=4\\ V=H_2(k) \oplus m = 00101 \oplus 111101 = 11000\\ W=4*H_3(4,24)=4*8=32\\ C=(U,V,W)=(4,24,32)$$ Example:

Now, $e(P,W)=e(1,32)=e(4,8)=e(U,H_3(U,V))$

So, $$k_1=e(U,[SK_{SG}]_1)=e(4,6)=4\\ k_2=e(U,[SK_{SG}]_2)=e(4,6)=4\\ k_3=e(U,[SK_{SG}]_3)=e(4,1)=12\\ k_4=e(U,[SK_{SG}]_4)=e(4,2)=5\\ k_5=e(U,[SK_{SG}]_5)=e(4,9)=3\\ k_6=e(U,[SK_{SG}]_6)=e(4,0)=1\\ k_7=e(U,[SK_{SG}]_7)=e(4,8)=9$$

Let $$A=\{P_1,P_2,P_3\}$$

Now,

$$\lambda^{A}_{01}=3,\lambda^{A}_{02}=-3,\lambda^{A}_{03}=1\\ k_1=4,k_2=4,k_3=12\\ k=k_1^{\lambda^{A}_{01}}*k_2^{\lambda^{A}_{02}}*k_3^{\lambda^{A}_{03}}=4^3*4^{-3}*12^1=12$$

… which is not equal to actual $k$ (which is $5$)!?!

Please tell me where I went wrong, or maybe even provide me with a numerical example (in integers) as a reference/guidance for me to follow.