Newest papers

Cryptanalysis and Repair of "Decentralized Multi-authority ABE for NC$^1$ from BDH"

Xingwang Wang · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.29224 · cited by 0 works (OpenAlex) · open-access PDF

Hindi

हम Datta, Komargodski, और Waters (Journal of Cryptology, 2023) के decentralized multi-authority attribute-based encryption construction पर एक बड़े पैमाने पर क्रिएट्रिकर फॉर्मूला-संस्करण-संस्करण हमला प्रस्तुत करते हैं। हमला एक भ्रष्ट अधिकार और दो उपयोगकर्ताओं के साथ दावा किए गए स्टैटिक मॉडल में सफल होता है जिनके व्यक्तिगत गुणों के सेट अन्य उपयोगकर्ताओं की सुरक्षा डिस्क्रिप्शन शेयरों से अनधिकृत रहते हैं. विफलता LSSS सुरक्षा मैट्रिक्स-नियमलिंग अनधिकरण के एक गलत विस्तार है, जो पूर्ण गुप्त शेयरों से पूरी तरह से समायोजित किया गया है. एक भ्रष्ट अधिकार इन मास्क को प्रकट कर सकता है और पहचान को अन्य उपयोगकर्ताओं की सुरक्षा

Machine translation (Meta M2M100); the English original follows.

Abstract

We present a plaintext-recovery attack on the decentralized multi-authority attribute-based encryption construction of Datta, Komargodski, and Waters (Journal of Cryptology, 2023). The attack succeeds in the claimed static model with one corrupt authority and two users whose individual attribute sets remain unauthorized even when combined with the corrupt authority's attribute. The flaw is an incorrect extension of LSSS matrix-normalization invariance from complete secret shares to coordinate-wise ciphertext masks. A corrupt authority can expose these masks and remove identity binding from other users' decryption shares. We replace the coordinate-wise masks with independent full linear sharings of zero and prove static security under decisional bilinear Diffie-Hellman (DBDH) in the random oracle model. The repair retains the original matrix-width and row-labeling restrictions and leaves authority keys, user keys, decryption, and ciphertext size unchanged, while increasing encryption randomness and field arithmetic. We also give analogous attacks on both multi-authority attribute-based inner-product functional encryption constructions of Datta and Pal (PKC, 2023). The same modification restores correctness and matrix-substitution invariance for both variants. We prove static security of the repaired small-universe variant under asymmetric DBDH. For the large-universe variant, we identify a separate missing source-group encoding in the original reduction, formulate an augmented $L$-DBDH assumption, prove its hardness in the asymmetric generic bilinear group model, and give a static security reduction for the repaired scheme.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Random oracle, Encryption, Ciphertext indistinguishability, Correctness, Computer security, Ciphertext

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange