Registration-based encryption: Removing private-key generator from IBE

Sanjam Garg, Mohammad Hajiabadi, Mohammad Mahmoody, Ahmadreza Rahimi

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    14 Scopus citations


    In this work, we introduce the notion of registration-based encryption (RBE for short) with the goal of removing the trust parties need to place in the private-key generator in an IBE scheme. In an RBE scheme, users sample their own public and secret keys. There will also be a “key curator” whose job is only to aggregate the public keys of all the registered users and update the “short” public parameter whenever a new user joins the system. Encryption can still be performed to a particular recipient using the recipient’s identity and any public parameters released subsequent to the recipient’s registration. Decryption requires some auxiliary information connecting users’ public (and secret) keys to the public parameters. Because of this, as the public parameters get updated, a decryptor may need to obtain “a few” additional auxiliary information for decryption. More formally, if n is the total number of identities and κ is the security parameter, we require the following. Efficiency requirements: (1) A decryptor only needs to obtain updated auxiliary information for decryption at most O(log n) times in its lifetime, (2) each of these updates are computed by the key curator in time poly (κ, log n), and (3) the key curator updates the public parameter upon the registration of a new party in time poly (κ, log n). Properties (2) and (3) require the key curator to have random access to its data. Compactness requirements: (1) Public parameters are always at most poly (κ, log n) bit, and (2) the total size of updates a user ever needs for decryption is also at most poly (κ, log n) bits. We present feasibility results for constructions of RBE based on indistinguishably obfuscation. We further provide constructions of weakly efficient RBE, in which the registration step is done in poly (κ, n), based on CDH, Factoring or LWE assumptions. Note that registration is done only once per identity, and the more frequent operation of generating updates for a user, which can happen more times, still runs in time poly (κ, log n). We leave open the problem of obtaining standard RBE (with poly (κ, log n) registration time) from standard assumptions.

    Original languageEnglish (US)
    Title of host publicationTheory of Cryptography - 16th International Conference, TCC 2018, Proceedings
    EditorsAmos Beimel, Stefan Dziembowski
    PublisherSpringer Verlag
    Number of pages30
    ISBN (Print)9783030038069
    StatePublished - 2018
    Event16th Theory of Cryptography Conference, TCC 2018 - Panaji, India
    Duration: Nov 11 2018Nov 14 2018

    Publication series

    NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
    Volume11239 LNCS
    ISSN (Print)0302-9743
    ISSN (Electronic)1611-3349


    Conference16th Theory of Cryptography Conference, TCC 2018

    All Science Journal Classification (ASJC) codes

    • Theoretical Computer Science
    • Computer Science(all)


    Dive into the research topics of 'Registration-based encryption: Removing private-key generator from IBE'. Together they form a unique fingerprint.

    Cite this