Questions tagged [proxy-re-encryption]

a type of public-key encryption scheme that allows to transform ciphertexts encrypted under Alice's public key into ciphertexts decryptable by Bob

Filter by
Sorted by
Tagged with
0 votes
0 answers
59 views

Does something like Symmetric reencryption exist?

I'm an amateur so bear with me. I was thinking about an E2E solution for data-at-rest proxy scenarios (like cloud storage provider) that allows you to issue and revoke users via symmetric keys. I'm ...
Daniel Hill's user avatar
2 votes
1 answer
105 views

Can you re-encrypt data without knowing what the data is or using PRE?

I'm currently working on a distributed consensus-based system. I currently give the system a private key through a threshold encryption model, and I want to be able to take some data encrypted with ...
Marston's user avatar
  • 21
2 votes
0 answers
54 views

Proxy Re-Encryption based on standard ElGamal

ElGamal-based BBS proxy re-encryption is well known, but it works on a variant of ElGamal like ($mg^r$,$g^{xr})$ not standard ElGamal ($g^r$,$mg^{xr}$). After reading the original paper, I found the ...
werthy's user avatar
  • 21
1 vote
0 answers
57 views

Signature delegation without secret keys

Scenario: have an entity A that cannot hold any secret keys. A concrete example would be: an application that needs to be open sourced and cannot be modified. In order to send any signed messages, it ...
rusty's user avatar
  • 111
1 vote
1 answer
296 views

ElGamal-based BBS proxy re-encryption implementation?

are there any available tools/libraries that implement the idea of EIGamal-based proxy re-encryption scheme shown below? Preferably in Golang. Thank you! Source of this picture: https://www.cs.jhu....
Leo's user avatar
  • 89
1 vote
1 answer
993 views

How proxy re-encryption works - layman perspective

Here is the use case: A uses B's public key to encrypt a message and sent it to B. In later stages, a new member C joins and B would like to let C be able to see this encrypted message (i.e., give the ...
Leo's user avatar
  • 89
2 votes
1 answer
92 views

Data Security and Encryption

I have a research paper on data security using proxy re-encryption, and I need to provide an answer to a reviewer's comment. However, I have no idea on what to do or how to answer it. The security ...
Kwame's user avatar
  • 21
4 votes
0 answers
144 views

Can RSA re-encrypt a message without decrypting it?

The goal of this question is to allow a server/proxy to forward an encrypted message without being able to read it with this procedure being transparent to the original sender and receiver. Assume we ...
bitmask's user avatar
  • 283
2 votes
0 answers
186 views

How can I use two different public keys with the same private key for fully homomorphic encryption?

I am pretty new to cryptography. Recently I run into this question where I have two different public keys with the same private key, and I need them for fully homomorphic encryption. Let's say ...
Jimmy's user avatar
  • 31
2 votes
0 answers
86 views

DES decryption of the homomorphic encryption ciphertext

I implemented an application using partial homomorphic encryption for outsourced computations. To get an efficient bandwidth, I am thinking to apply (DES) symmetric algorithm to encrypt the message ...
Maka's user avatar
  • 21
1 vote
2 answers
98 views

Collusion resistance in proxy re-encryption scheme depending on bilinear map rules

A proxy re-encryption scheme is collusion resistant, if the proxy and a delegatee are not able to recover the secret key of the delegator. For example, when we have a message that was originally ...
grallkam's user avatar
4 votes
1 answer
88 views

Multiparty dataset intersection count

Typically, Private Set Intersection (PSI) protocols let you learn the subset of items on each party's dataset that are in the intersection. The problem in this case is a relaxation of these kind of ...
DaWNFoRCe's user avatar
  • 862
1 vote
0 answers
130 views

Symmetric proxy re-encryption practical implementations

I want to encrypt some files in a cloud and delegate decryption rights to authorized users. The performance matters for me and I think I should use schemes utilizing symmetric encryption. Could ...
milo's user avatar
  • 141
1 vote
0 answers
116 views

How to upgrade encryption version of many large files?

Assume that I operate a user-facing online file syncing service that offers end-to-end encryption of large files, such that files are encrypted client-side first, then uploaded to the server for ...
Snowman's user avatar
  • 363
2 votes
1 answer
272 views

Can Paillier ,RSA or any other schemes be used for universal re-encryption like elGamal?

ElGamal, RSA, and Paillier cryptosystem have homomorphic property, and can be used fro re-encryption purposes. I want to use the encryption to re-encrypt ciphertext(as in proxy re-encryption but ...
abbasi_ahsan's user avatar
0 votes
1 answer
213 views

How re-encryption can be done through RSA

Both RSA and Elgamal have homomorphic properties. So both can re-encrypt the ciphertext. Re-encryption with Elgamal works as seen here. How does re-encryption work using RSA? What modification / ...
abbasi_ahsan's user avatar
2 votes
1 answer
382 views

Securely rekey/re-encrypt AES-encrypted file

Suppose I have a big file encrypted using AES (any mode you want) with key kA. I'd like to give an untrusted proxy a kA->kB "conversion key" so that it re-encodes ...
Ark-kun's user avatar
  • 121
0 votes
1 answer
170 views

Does Proxy re-encryption can re-encrypt large data?

Many resources talk about the benefit of Proxy Re-encryption (PRE) and I also implement my PRE using Elliptic Curve key pair. But after I set up Global parameters, I can encrypt very small data maybe ...
Dara Tith's user avatar
  • 103
2 votes
2 answers
355 views

Why is a proxy needed in proxy re-encryption?

Context Here's the usual proxy re-encryption scenario: Alice, with key pair $(pk_a, sk_a)$ encrypts a message $m$, producing $c = encrypt(pk_a, m)$ Alice saves $c$ on an untrusted storge provider (...
Fedma's user avatar
  • 91
2 votes
0 answers
98 views

Is it possible to delegate re-encryption key generation?

In a non-interactive proxy re-encryption scheme, Alice, with the key pair $(pk_a, sk_a)$, needs to issue a re-encryption key $re_{a\rightarrow b}$ once she wants to share her secret message with Bob, ...
Fedma's user avatar
  • 91
2 votes
1 answer
226 views

Application of uni-directional proxy re-encryption?

What kinds of applications is uni-directional proxy re-encryption applicable to? I learned some applications that proxy re-encryption can be used, which are email and file sharing scenarios. All of ...
mallea's user avatar
  • 1,595
2 votes
1 answer
185 views

Possible to split a secret to generate a re-encryption key (PRE)?

I am wondering, if it is possible to split a secret (s.th. like shamir's secret sharing) which can be used to generate a re-encryption key in proxy re-encryption and only serve the splitted portions ...
Techradar's user avatar
  • 133
0 votes
0 answers
102 views

Proxy Reencryption - semi-trust into proxy required?

As far as I understood, PRE claims to hide the underlying message from being read by the proxy. Why can't the proxy simple use a public key of himself as target?
Techradar's user avatar
  • 133
1 vote
0 answers
457 views

Additive homomorphic secret sharing

I am new to cryptography esp, homomorphic encryption. I would like to know if the following is possible using something similiar to additive homomorphic secret sharing. Please apologize me if its too ...
shrram's user avatar
  • 21
2 votes
2 answers
604 views

Is there a proxy re-encryption algorithm for Elliptic Curve ECIES?

I was wondering if there is a way to perform proxy re-encryption for ECIES public-key encryption (i.e. given a message encrypted with Alice's public key, re-encrypt it using Bob's public key). Is that ...
Ayman Madkour's user avatar
2 votes
2 answers
243 views

What's the difference between single key-pair public key encryption and proxy re-encryption?

Proxy Re-Encryption provides the ability to transform a ciphertext encrypted under some key to the one under another key. This seems interesting. But, something seems strange. Suppose Alice has a key ...
mallea's user avatar
  • 1,595
4 votes
1 answer
205 views

Proxy Re-Encryption with provable re-encryption target

Suppose Alice has encrypted some plaintext $P$ to Bob. Bob wishes to re-encrypt this information to Charlie via proxy, in such a manner that: The proxy cannot obtain $P$ The proxy can prove that Bob ...
Dr. John A Zoidberg's user avatar
3 votes
3 answers
3k views

How useful is proxy re-encryption if we end up needing a symmetric key?

I'm trying to design a system using proxy re-encryption (PRE) to allow the sharing of data between a user (delegator) and other users he delegates access to (delegatees). The goal is to use a PRE ...
mcansado's user avatar
  • 195
2 votes
1 answer
653 views

Usage of pairings in proxy re-encryption algorithm

I am having trouble understanding one part of the AFGH algorithm for proxy re-encryption (my background in discrete mathematics is lacking a bit). The paper describes the algorithm setup the ...
mcansado's user avatar
  • 195
3 votes
1 answer
599 views

ElGamal proxy re-encryption

I wrote an algorithm to implement a suggestion in a paper by Ivan and Dodis to convert a regular ElGamal encryption scheme into a proxy re-encryption one (it's at page 6, left column of this but I ...
mcansado's user avatar
  • 195
2 votes
1 answer
114 views

Identity-based proxy re-encryption using different system parameters

I am wondering if there is an identity based proxy re-encryption scheme (such as the Green-Ateniese scheme https://eprint.iacr.org/2006/473.pdf) that converts an encryption computed with ID1, system ...
Nikos Fotiou's user avatar
2 votes
0 answers
238 views

Proxy re-encryption mod operations

I managed to implement the proxy re-encryption scheme from http://eprint.iacr.org/2009/189.pdf in Python 2.7, however I am having performance issues. As it is, I can run the algorithm for key sizes up ...
Elisa's user avatar
  • 21
1 vote
0 answers
109 views

What scheme will allow merging and splitting the result of a function?

I am wondering if it's possible to have a scheme as follows. Here is the scenario: we have a set of objects (e.g. strings) {O1, O2, ..., On} we have a set of users {U1, U2, ..., Um} each user asks ...
pAkY88's user avatar
  • 163
6 votes
2 answers
733 views

Is there an encyption scheme that combines additive homomorphism with ability to proxy re-encrypt?

Is there an encyption scheme that combines additive homomorphism with ability to proxy re-encrypt? I've tried digging around on the Internet but haven't found anything conclusive on the topic.
Martin Sustrik's user avatar
8 votes
3 answers
2k views

Can we proxy-re-encrypt using homomorphic encryption schemes?

Homomorphic encryption schemes are PKE schemes with an additional special method Evaluate. The Evaluate method takes input any function (as boolean circuit) and encrypted inputs of the function and ...
sashank's user avatar
  • 6,134
1 vote
3 answers
2k views

How practical is proxy re-encryption for AES?

In proxy re-encryption schemes, a proxy is given special information that allows it to translate a ciphertext under one key into a ciphertext of the same message under a different key. How ...
sashank's user avatar
  • 6,134