Fast Proxy Re-Encryption for Publish/Subscribe Systems
Abstract
We develop two IND-CPA-secure multihop unidirectional Proxy Re-Encryption (PRE) schemes by applying the Ring-LWE (RLWE) key switching approach from the homomorphic encryption literature. Unidirectional PRE is ideal for secure publish-subscribe operations where a publisher encrypts information using a public key without knowing upfront who the subscriber will be and what private key will be used for decryption. The proposed PRE schemes provide a multihop capability, meaning that when PRE-encrypted information is published onto a PRE-enabled server, the server can either delegate access to specific clients or enable other servers the right to delegate access. Our first scheme (which we call NTRU-ABD-PRE) is based on a variant of the NTRU-RLWE homomorphic encryption scheme. Our second and main PRE scheme (which we call BV-PRE) is built on top of the Brakerski-Vaikuntanathan (BV) homomorphic encryption scheme and relies solely on the RLWE assumption.
Document Details
- Document Type
- Pub Defense Publication
- Publication Date
- Sep 20, 2017
- Source ID
- 10.1145/3128607
Entities
People
- Gyana Sahu
- Kurt Rohloff
- Vinod Vaikuntanathan
- Yuriy S Polyakov
Organizations
- Defense Advanced Research Projects Agency
- Intelligence Advanced Research Projects Activity
- Massachusetts Institute of Technology
- National Science Foundation
- National Security Agency
- New Jersey Institute of Technology
- Office of the Director of National Intelligence
- United States Army Research Laboratory