Identity-based encryption papers describe that system parameters are declared as public. However,in real scenario, how to distribute system parameters to users?

  • $\begingroup$ Please include a reference to one of those papers please. "System parameters" is kind of unclear - context is required. $\endgroup$
    – Maarten Bodewes
    Commented Jul 19, 2016 at 16:17

1 Answer 1


Public parameters (or system parameters as you call them) can be distributed however you want. Papers which introduce Identity-based Encryption schemes usually only present the scheme and not how it can be applied in the real world 1. The public parameters in IBE can be compared to the pre-shared data in the Diffie-Hellman key exchange protocol where both parties have to agree on a shared modulus and generator before starting the protocol. There are different ways to distribute such data. Here are two:

  • Bake (put into the application code) the public parameters into the application, so that every client has the same parameters and don't need additional trust negotiations. This will be a trust root.

  • Query the public parameters from some other party in a secure manner (signed and not necessarily encrypted). Each client has to have some trust root (certificate of the third party) for this to work.

1 If you see a commercial product which uses IBE/HIBE/ABE/PE/HVE/FE, please write a comment.

  • $\begingroup$ Voltage Security, which is now part of HP, uses IBE in some of their products such as their mail security stuff (voltage.com/products) $\endgroup$
    – DrLecter
    Commented Jul 19, 2016 at 18:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.