0
$\begingroup$

Is it possible to have an encryption and decryption scheme so that decryption is a 2-party process?

For instance, Alice sends an encrypted message to Bob along with the key for that message. Bob, by himself, cannot feasibly decrypt this message. However, with some interactive help from Alice, he can decrypt it. If Bob manages to lose the plaintext after this process, the information gained during the decryption process cannot help him decrypt it again. He must ask Alice for help again.

I could see this being useful in access-control systems or DRM.

Improve this question
$\endgroup$

1 Answer 1

Reset to default
1
$\begingroup$

Probably not. When Bob at the end of the interaction finally computes the plaintext, it must be a function of everything he has obtained thus far; there's nothing stopping him from running the same computation again, unless you introduce some kind of special hardware or other additional assumptions.

In other words, decryption is deterministic, and we know that deterministic interaction is useless ($\mathbf{dIP} = \mathbf{NP}$).

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.