Improved Security Notions for Proxy Re-Encryption to Enforce Access Control. / Berners-Lee, Elizabeth.

Lecture Notes in Computer Science. Springer, 2019. p. 66-85.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

E-pub ahead of print

Abstract

Proxy Re-Encryption (PRE) allows a ciphertext encrypted under Alice’s public key to be transformed to an encryption under Bob’s public key without revealing either the plaintext or the decryption keys. PRE schemes have clear applications to cryptographic access control by allowing outsourced data to be selectively shared to users via re- encryption to appropriate keys. One concern for this application is that the server should not be able to perform unauthorised re-encryptions. We argue that current security notions do not adequately address this concern. We revisit existing definitions for PRE, starting by challenging the concept of unidirectionality, which states that re-encryption tokens from A to B cannot be used to re-encrypt from B to A. We strengthen this definition to reflect realistic scenarios in which adversaries may try to reverse a re-encryption by retaining information about prior ciphertexts and re-encryption tokens. We then strengthen the adversarial model to consider malicious adversaries that may collude with corrupt users and attempt to perform unauthorised re-encryptions; this models a malicious cloud service provider aiming to subvert the re-encryption process to leak sensitive data. Finally we revisit the notion of authenticated encryption for PRE. This currently assumes the same party who created the message also encrypted it, which is not necessarily the case in re-encryption. We thus introduce the notion of ciphertext origin authentication to determine who encrypted the message (initiated a re-encryption) and show how to fufil this requirement in practice.
Original languageEnglish
Title of host publicationLecture Notes in Computer Science
PublisherSpringer
Pages66-85
Number of pages20
ISBN (Electronic)978-3-030-25283-0
ISBN (Print)978-3-030-25282-3
DOIs
Publication statusE-pub ahead of print - 20 Jul 2019
EventLatincrypt 2017 - La Habana, Cuba
Duration: 20 Sep 201722 Sep 2017
http://latincrypt.matcom.uh.cu/

Conference

ConferenceLatincrypt 2017
Period20/09/1722/09/17
Internet address
This open access research output is licenced under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License.

ID: 29892545