摘要
1 Introduction and main contributions Searchable encryption(SE)allows client(data user)to outsource searchable ciphertexts onto server in a way that the data can further be searched by server.For semi-honest-but-curios server(that follows the protocol but curious to learn the plaintext of client's data),data privacy while performing search is of primary concern.However,in case of malicious server(that follows the protocol but may alter the result),besides data privacy,the other design rational,i.e.,verifiable searchability is required.In verifiable searchability,server has to prove client that the retured search result is correct and complete.