Questions tagged [certificateless-crypto]
Certificateless cryptography is a variant of ID-based cryptography intended to prevent the key escrow problem. Only a partial private key is generated by the key generation center (KGC) and the other part of the private key is chosen by and only known to the user. An additional public key is generated by the user, which, however does not need to be certified by any trusted party.
20
questions
1
vote
1
answer
37
views
secure channel for sending partial private keys!
In certificateless cryptography, the KGC must ensure that the partial private keys are delivered securely to the correct entities.
So my question is how KGC can send these keys secretly?
In the other ...
- 31
3
votes
1
answer
108
views
Certificateless public key cryptography
In the Wikipedia article on Certificateless Public Key Cryptography https://en.wikipedia.org/wiki/Certificateless_cryptography, it states, "For tight security, a certificateless system has to ...
1
vote
0
answers
13
views
Is aggregator consider trustworthy in a CLAS scheme
In certificateless aggregate signature (CLAS) scheme, is an aggregator consider trustworthy? Can they act as an adversary, where they can alter the messages from the users and create a new valid ...
1
vote
0
answers
22
views
Can an aggregator be a type 1 adversary?
In a certificateless aggregate signature scheme, can a signature aggregator be a type 1 adversary (external attacker who can have access to secret value of a user)? I thought signature aggregator is ...
0
votes
1
answer
36
views
Confusing notation in signature scheme
In the paper Efficient and Secure Pairing-Free Certificateless Aggregate Signature Scheme for Healthcare Wireless Medical Sensor Networks, on the signature generation part (Page 5), there is an ...
1
vote
1
answer
180
views
How does one associate the actual identity of a person or organization with a decentralized ID?
In SSI (Self-Sovereign Identity), anyone can generate their own DID (Decentralized ID). No authority or authorization is needed to create one. Since a public key pair is associated with DID, the ...
- 161
2
votes
0
answers
50
views
How are security proofs performed for Certificateless PEKS schemes?
I have been studying several CLPEKS (CertificateLess Public-key Encryption scheme with Keyword Search) schemes and I understand the security assumptions and the several types of security models used ...
1
vote
0
answers
57
views
Certificateless Key Agreement
I'm studying Certificateless Cryptography and specifically I'm studying a scheme without pairings.
I read a lot of time this paper (https://www.sciencedirect.com/science/article/pii/S0898122112002490)...
- 381
0
votes
1
answer
110
views
Elliptic Curves for Pairings
how can is possible to know if an elliptic curve is suitable for protocols that adopt pairing?
For example, in Certificateless Cryptography with pairing, is it possible to know if all elliptic curves ...
- 381
2
votes
0
answers
62
views
Multi-Authority (KGC) Certificateless Cryptography
I'm thinking to a particular scenario where I'm adopting the certificateless cryptography (the generic schema) where I have 2 trusted nodes, that we can identify as: $KGC_1$, $KGC_2$. Furthermore, I ...
- 381
0
votes
2
answers
161
views
eavesdropping on sha 256 consist of two entries one is public is secure
If i need to use symmetric encryption(AES), sending the same message for many times with the same password and initial value is absolutely not secure(i don't use Public key exchange ((in first ...
- 65
1
vote
2
answers
107
views
Discrete Logarithm Problem or just integer exponentiation problem?
In reading the following paper,
https://ai2-s2-pdfs.s3.amazonaws.com/35eb/afbaab34223bca50a7be2f5915fddf918fc7.pdf
Generate two primes $p$ and $q$ such that $q|p-1$. Pick a generator $g$ of $Z_p^{*}$...
- 343
1
vote
1
answer
140
views
Computational Assumption For the extended discrete logarithm
Choose randomly $P\in G_1, (s,a \in Z_q)$.
let the attackers know $a,P$ and keep $s$ as secret.
Also the following is given.
$$sP,(a+s)^{-1}P$$
Individually,
From $sP$, trying to reveal ($s$) will ...
- 343
2
votes
2
answers
2k
views
Understanding Hash function notations
I am implementing a Certificateless Cryptography Algorithm by referencing the paper An Efficient Certificateless Encryption for Secure Data Sharing in Public Clouds. In this paper on page no. 4 during ...
1
vote
1
answer
291
views
Certificateless cryptography Implementation
Hello guys I am trying to implement Certificateless Cryptography algorithm with reference to this base paper. Right now I am trying to implement the code in java. ...
0
votes
1
answer
27
views
What will browser show when a user access website and website present certificate of some other domain with same top level domain [closed]
For example, User tries to access a.example.com and server presents abc.example.com with a.example.com not in SANs list.
Will it be just a warning or an error?
- 3
1
vote
0
answers
145
views
How can user privacy be preserved in certificateless cryptography?
In certificateless cryptography, how can a user preserve his privacy from Key Generation Center? If the KGC becomes malicious, how can the user's privacy be preserved?
I read "Privacy-Preserving ...
- 205
0
votes
0
answers
469
views
Example of CL PKC
I am trying to solve the example of algorithms of Certificateless Signature by manually and solving the mathematics of Algorithms but not succeed while doing mathematical calculations.
Please ...
- 205
1
vote
1
answer
2k
views
Can you explain partial private key extract algorithm in certificateless Public key cryptography?
Related to the algorithms of certificate-less Signature approach of Al-Riyami and Paterson…
Why is there a need for a "partial private key extract algorithm"?
Why should it be needed when calculating ...
- 205
3
votes
2
answers
2k
views
Certificateless cryptography
While reading "Certificateless Public Key Cryptography" by Author Sattam S. Al-Riyami and Kenneth G. Paterson, they have considered generation of private keys by a Key Generation Center (KGC). If the ...
- 205