基于认证的高效公钥加密算法

Efficient Certificate-based Public-key Encryption Scheme

2003年,Gentry提出基于认证的公钥加密方案.在基于认证的公钥加密方案中,第三方对认证申请者的公钥和/或身份进行签名,并将签名作为认证发送给申请者,申请者保存该认证作为解密时的部分私钥.接收方对密文解密需要同时拥有第三方对其公钥和/或身份的认证和接收方公钥对应的私钥,因此基于认证的加密方案同时具备基于身份加密方案的公钥可认证性和传统公钥方案中的私钥免撤销性.本文提出一种高效、紧凑的基于认证的公钥混合加密算法,新算法能在非随机预言机模型下被证明满足选择密文攻击安全.

In 2003, Gentry proposed a certificate-based public-key encryption （CBE） scheme. In CBE scheme, a third part signs a certification on an applicant＇s public key or identity and sends the certification to the applicant, the applicant saves it and uses it as a partial private key （decryption key） .A receiver needs the certification from the third party and his own public-private keys to decrypt a ciphertext, so CBE scheme combines the best aspects of identity-based encryption （implicit certification） and public-key encryption （no key escrow）. We present an efficient and tight certificate-based public-key hybrid encryption scheme, which can he proved satisfying adaptive chosen ciphertext attack security without random oracle.