I have one doubt from CP-ABE KeyGen algorithm (paper).

In Setup, master key is $MK=(\beta, g^\alpha)$.

In KeyGen(MK, S), they say generate random number $r$ and compute $D=g^{(\alpha+r)/\beta}$.

How one calculates $D$ from $g^\alpha$ ? ($\alpha$ is not part of $MK$).

Does he calculate $1/\beta$ and computes $D$ as below?

$\qquad D = {(g^\alpha.g^r)}^{1/\beta}$

I am not sure I did this the right way? Am I missing something here. Please help me understand.



Does he calculate $1/\beta$ and computes $D$ as below?

$\qquad D = {(g^\alpha \cdot g^r)}^{1/\beta}$

Yes, that is what he does; as you know, ${(g^\alpha \cdot g^r)}^{1/\beta} = {(g^{\alpha+r})}^{1/\beta} = g^{(\alpha+r)/\beta}$.

He computes $1/\beta$ modulo $p$ (the order of $g$); this can be done by either the extended Euclidean method, or (because $p$ is prime) by using $1/\beta = \beta ^ {p-2}$


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.