Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with identity-based-encryption
Search options not deleted
user 30855
In identity-based encryption (IBE) the public key of a user $A$ is some identity string $ID_A$, e.g., an email address. To encrypt a message for this user there is no need to retrieve an authentic copy of the public key, as it is in public key cryptography, but one can simply use the identity string $ID_A$.
3
votes
1
answer
99
views
How to distribute system parameters in identity-based encryption
Identity-based encryption papers describe that system parameters are declared as public. However,in real scenario, how to distribute system parameters to users?
- 321
3
votes
1
answer
228
views
Why is the simulation required in these identity-based encryption security proofs?
In identity-based encryption papers (i.e.this) it is very difficult for me to understand security proof. I don't know why they prove assumption (BDH, BDDH) for security of their scheme. Some uses rand …
- 321
1
vote
0
answers
51
views
Some Question about Security Proof of authenticated identity-based encryption
In authenticated identity-based encryption by Benn Lynn, in proof of security, I have a little difficulties in understanding.
In key extraction queries,if attacker request for guessed ID, then B fails …
- 321
1
vote
0
answers
123
views
Why security proof uses random oracles in identity-based encryption?
In identity-based encryption, users decrypt the ciphertext by using private keys. Without private key, no one will be able to decrypt.In security proofs like here, random oracles are used with the res …
- 321
0
votes
0
answers
45
views
Why not consider modification in ciphertext part in identity-based encryption
In identity-based broadcast encryption system, the ciphertext is
$$ C=<c1,c2,...,cn,U,V,W>$$
There can be a man-in-the-middle who can modify one or all of the $c1,c2,...,cn$ values so that the recei …
- 321
3
votes
2
answers
146
views
Security (CPA?,CCA?) in Authenticated identity-based encryption
When I read authenticated identity-based encryption by Ben Lynn, encryption works to send data from user A to user B where:
$$a=e(d_{A},B)$$
$$s=H_{3}(Msg,K)$$
$$C=<s,\gamma \oplus H_{2}(a,s),H_{4(\g …
- 321
2
votes
1
answer
50
views
Which one is correct probability formula for the same master secret value in identity-based ...
Assume two servers $(n=2)$ use the same domain curve parameters and same hash function $H:\{0,1\}^{*} \rightarrow G_{1}$ . Then the hash value for the same identity falls in same result and let it be …
- 321
3
votes
1
answer
58
views
Concept of "guessed ID" in Authenticated Identity-Based Encryption
In Authenticated Identity-Based Encryption by Ben Lynn, in Proof of Integrity (section 4.3) and Proof of Security (section 4.4), I cannot grab the concept of "guessed ID" . Because encryption differs …
- 321
0
votes
1
answer
162
views
Possibility for same Private Key Generation in identity-based encryption
In private key generation of IBE scheme, private key is generated as follows: $SK_{ID}=s.H(ID)$
Suppose two servers use the same curve domain parameters.
If PKG on server A generates private key $SK_ …
- 321
2
votes
1
answer
538
views
Why Boneh-Franklin BasicIdent IBE is not chosen-ciphertext secure? Why use random oracle?
I don't know why BasicIdent is not chosen-ciphertext secure. If there are anybody who knows well, please explain it to me with example.
Moreover, I don't know random oracle and its usage for security …
- 321
1
vote
2
answers
509
views
System parameters in identity-based encryption
In IBE schemes, the system parameters are $(q, \mathbb{G}, F, \hat{e}, P, Q, T, H_1)$. I don't know $\hat{e}$.
For example, in type A pairing…
type = a
q = 98826429041171753291515535532523512299028 …
- 321