Skip to main content

Questions tagged [broadcast-encryption]

Broadcast encryption is the cryptographic problem of delivering encrypted content (e.g. TV programs or data on DVDs) over a broadcast channel in such a way that only qualified users (e.g. subscribers who have paid their fees or DVD players conforming to a specification) can decrypt the content

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

Group keys with revocation in publish/subscribe IoT

I have a group of subscribers who are subscribed to a message broker in an IoT setting, let's say to the topic 'sensor/temperature'. Now, I want to create a public/private key pair in such a way that ...
kekdajeet's user avatar
1 vote
0 answers
29 views

Requirements of dedicated broadcast channel in Joint-Feldman protocol

I am currently reading through Secure Distributed Key Generation For Discrete-Log Based Cryptosystems, which describes a secure variant of the Joint-Feldman protocol. In this paper, in section 2 (...
shmth's user avatar
  • 111
2 votes
1 answer
124 views

KP-ABE Key Generation

In Key Policy Attribute-based encryption if we need a targeted broadcast where the set of attributes are the same for a group of users. It means they all share the same secret key right? Or is it that ...
Crypto_researcher's user avatar
1 vote
1 answer
85 views

Encrypting a broadcast message decryptable by a subset of receivers

I wasn't certain how to title this request/problem, but here goes: I'm A, and I want to send a message that is received by B, C, D. Each receiving entity here is part of some set of domains D1, D2, D3:...
cradical's user avatar
2 votes
1 answer
68 views

Is it possible to convert a selective secure broadcast encryption scheme to an adaptive secure broadcast encryption scheme?

I was reading the paper, entitled "Multiparty Key Exchange, Efficient Traitor Tracing, and More from Indistinguishability Obfuscation", by Boneh et al. On page 23, the authors have claimed ...
Mriganka Mandal's user avatar
2 votes
1 answer
292 views

Compute euclidian distance on encrypted data

The scenario is described as following: Let $A$ an user that is transmitting an encrypted (with its own public key $PK_A$) data vector containing its position as $p = Enc(PK_A, [x,y])$ towards a group ...
CipherX's user avatar
  • 381
1 vote
0 answers
25 views

Are the receivers in stateless broadcast encryption assumed to be computationally bounded?

I started to read about the broadcast encryption problem, specifically, the first, seminal work of FN93 followed by the subset cover technique presented at NNL01, and something really trivial and ...
Bartolinio's user avatar
1 vote
0 answers
31 views

Partially synchronous model in broadcast

I am confused by the different definitions attributed to partially synchronous model: for e.g., in a paper by Hevia and Micciancio (PODC 2005), they state that messages sent in one round are ...
Vijeth Aradhya's user avatar
4 votes
3 answers
170 views

Scheme that encrypt with $n$ pk that any sk of the pks can decrypt?

Suppose there are $n$ users each with public/private key pair $(pk_i,sk_i)$ $i=1,\cdots,n$. Is there any scheme that I can encrypt $m$ using the set of public keys $(pk_1,\cdots,pk_n)$, and can ...
Felix LL's user avatar
  • 321
2 votes
0 answers
50 views

Group receiver and sender, only parts of them can decrypt

suppose there is a group $\mathcal{N}$ of $n$ people with public/private key pairs $(pk_i,sk_i)$ $i=1,\cdots,n$. Is there any scheme that I can send message to a subset of users $i_1, \cdots, i_m$, ...
Felix LL's user avatar
  • 321
1 vote
1 answer
117 views

Trivial Broadcast Encryption Scheme for video conferencing how well does it handle users joining or leaving a call?

Consider the trivial Broadcast Encryption Scheme for video conferencing, where each user shares a long-lived key with the broadcaster, and the session key used to encrypt a multicast message (or ...
M.J.Watson's user avatar
2 votes
3 answers
285 views

Broadcast encryption not using symmetric keys

Is there a common scheme for broadcast encryption that doesn't involve an exchange of a shared key? I'm aware that traditionally a common symmetrical key would be given to all parties and exchanged ...
Alex Godwin's user avatar
1 vote
0 answers
84 views

an asymmetric encryption scheme with multiple distinct private keys [duplicate]

Is there a asymmetric encryption scheme that allows for multiple private decryption keys? where m= plaintext message and c= cyphertext message c = Ek(m) where K is the public encryption key. and ...
Joshua Zeidner's user avatar
2 votes
0 answers
669 views

Which Attribute Based Encryption method is better for broadcast encryption? (KP-ABE or CP-ABE)

I have a basic understanding of public-private and symmetric crypto, but I keep struggling with the concept of ABE. I know the difference between the two variants: Key-Policy: A key is linked to a ...
user1226868's user avatar
1 vote
1 answer
383 views

Using RSA keys for Broadcast Encryption?

What is the best way of using both broadcast encryption and RSA private keys? I'm particularly interested in Broadcast Encryption as implemented by BGW 1, but I guess that the question stands for any ...
stefanix's user avatar
  • 317
2 votes
0 answers
77 views

How to use maps in the Boneh Gentry Waters encryption scheme?

I am reading the source of pbc_bce library which implements the Boneh Gentry Waters broadcast encryption scheme. In this paper the authors use for their ...
ab3l's user avatar
  • 21
1 vote
0 answers
78 views

Anonymous Identity-based broadcast encryption use single common key or different keys

In identity-based broadcast encryption, suppose the broadcast ciphertext $(r_1,r_2,\dots,r_i,U,W,V)$ is sent to the receiver. In some cases, they use some function $f(x)=k-\prod_{i=1}^{t} (x-v_{i})$ ...
myat's user avatar
  • 343
6 votes
1 answer
180 views

How to select corresponding ciphertext in anonymous Identity-based broadcast encryption?

In identity-based broadcast encryption, suppose the broadcast ciphertext $(r_1,r_2,\dots,r_i,U,W,V)$ is sent to the receiver. It does not describe which user corresponds to which ciphertext part. User ...
myat's user avatar
  • 343
4 votes
1 answer
651 views

A standard extension of ECIES for multiple recipients (broadcast / multiparty)?

I have one sender, and a small number (~5) of recipients. The sender knows each recipient's public EC key. I want the sender to broadcast a single message in such a way that any one of the recipients ...
RhinoGuy's user avatar
2 votes
0 answers
80 views

on broadcast encryption

I've read the following paper and have one question on it. M. Luby and J. Staddon, "Combinatorial Bounds for Broadcast Encryption", EUROCRYPT'98. On page 523 (12th page of the paper) the authors say ...
tmac's user avatar
  • 21
3 votes
1 answer
580 views

(Lightweight) Multicast one-way Authentication

Problem: I'm thinking about a lightweight solution to provide source authentication (only one source) to multiple receivers (multicast message). Context: Taking the problem to ground, we can think of ...
renzoe's user avatar
  • 31
2 votes
1 answer
65 views

Question about discrete log - why can one attacker not solve for g but two colluders can?

I'm reading about the broadcast encryption described in Fiat and Naor's paper, I screen grabbed the relevant part below. My question is essentially: If there's a secret: $g^{abc}$ $mod$ $A$ (where $...
cciollaro's user avatar
  • 123
1 vote
0 answers
426 views

Misunderstanding Broadcast Encryption [duplicate]

I have a secret message which I want to encrypt such that any of several different keys can open it independently. The keys can't know about each other and it has to be able to work completely ...
hackartist's user avatar
2 votes
1 answer
336 views

Attribute-based broadcast encryption with respect to ABE

What is the exact difference between attribute-based encryption (ABE) and attribute-based broadcast encryption (ABBE)? Is ABBE equivalent to broadcast encryption on top of ABE?
akshu281's user avatar
1 vote
1 answer
99 views

Use of the master key in Delerablée's Identity-based Broadcast Encryption

I'm reading “Identity-Based Broadcast Encryption with Constant Size Ciphertexts and Private Keys” by Cécile Delerablée. On page 207, the encryption process needs $\gamma$ which is part of the master ...
Jonghyun Kim's user avatar
2 votes
2 answers
3k views

Sharing an encrypted file between a group of people

Is there any way to share an encrypted file with a group? In the other words, can I encrypt a file with a public key so that each person in a group decrypt it with his/her private key? Is there any ...
Gohar's user avatar
  • 121
3 votes
1 answer
3k views

Multi-key decryption

Let's assume I want to send a secret message to $N$ recipients in an asymmetric way. My message could be encrypted with $N$ different public keys $p_i$ one after another and send to each user ...
RomeoAndJuliet's user avatar
3 votes
1 answer
540 views

efficient authentication with broadcast encryption?

(I am not a crypto expert, so I apologize if the terminology I use is incorrect.) Suppose I have the following simple broadcast encryption scheme for securely sending content to $n$ authorized ...
Richard Hansen's user avatar
10 votes
1 answer
2k views

Advanced Access Content System (AACS) and Subset Difference techniques for Broadcast Encryption

I'm trying to get a grasp on AACS and Subset Difference (archived version with images) for a project I'm working on and am having a hard time coming up with a technically valid layman explanation, let ...
makerofthings7's user avatar