Lattice-based group encryptions with only one trapdoor  

作　　者：Jing PAN Jiang ZHANG Fangguo ZHANG Xiaofeng CHEN Willy SUSILO 

机构地区：[1]State Key Laboratory of Integrated Service Networks(ISN),Xidian University,Xi’an 710071,China [2]State Key Laboratory of Cryptology,P.O.Box 5159,Beijing 100878,China [3]School of Computer Science and Engineering,Sun Yat-sen University,Guangzhou 510006,China [4]Guangdong Key Laboratory of Information Security,Guangzhou 510006,China [5]Institute of Cybersecurity and Cryptology,School of Computing and Information Technology,University of Wollongong,Wollongong NSW 2522,Australia

出　　处：《Science China(Information Sciences)》2022年第5期201-218,共18页中国科学（信息科学）（英文版）

基　　金：supported by the National Cryptography Development Fund(Grant No.MMJJ20180110);National Natural Science Foundation of China(Grant No.61960206014)。

摘　　要：Group encryption(GE),the encryption analog of group signatures,is a fundamental primitive that offers a privacy-preserving service for a specific receiver concealed within a group of certified users.Like other cryptographic primitives,GE constructions are always considered relative to the potential danger of quantum computations.The only existing lattice-based variant appeared in the work of Libert et al.(Asiacrypt’16).Despite its non-trivial achievement,the construction suffers in terms of efficiency due to the extensive use of lattice trapdoors.In this paper,we develop an integrated zero-knowledge argument system that is friendly to both accumulated values and hidden matrices and supports efficient designs from lattices.Based on this system,we propose efficiency enhancing GE where only group users are required to possess the lattice trapdoors and the other parties are not.In particular,we utilize lattice-based cryptographic accumulators to confirm prospective group members and use the dual Regev encryption scheme to provide privacy for ciphertext recipients.These modifications significantly increase GE efficiency.In addition,under the intractability assumptions of the standard lattice problems,we prove the security of the proposed scheme in the standard model(assuming interaction during the proof phase),which retains the strongest level of security as the only currently available candidate.

关 键 词：lattice cryptography group encryptions lattice trapdoors accumulators ZERO-KNOWLEDGE 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]