Newest papers

Cryptanalysis and Repair of "Decentralized Multi-authority ABE for NC$^1$ from BDH"

Xingwang Wang · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.29224 · cited by 0 works (OpenAlex) · open-access PDF

French

Nous présentons une variante augmentée de la formule d'identification de l'état correct sur la construction de cryptage basée sur l'attribut multi-autorité décentralisée de Datta, Komargodski et Waters (Journal of Cryptology, 2023). L'attaque se produit dans le modèle statique revendiqué avec une autorité corrompue et deux utilisateurs dont les ensembles d'attributs individuels demeurent non autorisés même lorsqu'ils sont combinés avec l'attribut de l'autorité corrompue. Le défaut est une extension incorrecte de l'invariance de la matrice de normalisation de sécurité LSSS séparée des actions secrètes complètes aux masques de chiffrement coordonnées. Une autorité corrompue peut

Machine translation (Meta M2M100); the English original follows.

Abstract

We present a plaintext-recovery attack on the decentralized multi-authority attribute-based encryption construction of Datta, Komargodski, and Waters (Journal of Cryptology, 2023). The attack succeeds in the claimed static model with one corrupt authority and two users whose individual attribute sets remain unauthorized even when combined with the corrupt authority's attribute. The flaw is an incorrect extension of LSSS matrix-normalization invariance from complete secret shares to coordinate-wise ciphertext masks. A corrupt authority can expose these masks and remove identity binding from other users' decryption shares. We replace the coordinate-wise masks with independent full linear sharings of zero and prove static security under decisional bilinear Diffie-Hellman (DBDH) in the random oracle model. The repair retains the original matrix-width and row-labeling restrictions and leaves authority keys, user keys, decryption, and ciphertext size unchanged, while increasing encryption randomness and field arithmetic. We also give analogous attacks on both multi-authority attribute-based inner-product functional encryption constructions of Datta and Pal (PKC, 2023). The same modification restores correctness and matrix-substitution invariance for both variants. We prove static security of the repaired small-universe variant under asymmetric DBDH. For the large-universe variant, we identify a separate missing source-group encoding in the original reduction, formulate an augmented $L$-DBDH assumption, prove its hardness in the asymmetric generic bilinear group model, and give a static security reduction for the repaired scheme.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Random oracle, Encryption, Ciphertext indistinguishability, Correctness, Computer security, Ciphertext

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange