Computational cryptography › Public-key encryption and key exchange › Classical number theory › Pairing groups: BLS12-381, BN254
PUBLIC-KEY ENCRYPTIONPrimitive

Identity- and attribute-based encryption

In plain words

Encryption where your email address is your public key. A central authority hands out the matching unlock keys.

The idea: Normally you must fetch someone's public key before encrypting to them. With IBE, anyone can turn a string like an email address into a public key, using the authority's published parameters. The authority holds a master secret that turns any such string into the matching private key, and gives it to whoever proves they own the address. Pairings make this possible: the sender can combine the identity with the authority's public value in a way that only the matching private key undoes.

Why it matters: Avoids certificate hassles, but the authority could read everything.

The details

On the map: Boneh-Franklin IBE, CP-ABE

In identity-based encryption your public key is simply your identity, such as an email address[1]. An authority holding a master key issues the matching decryption keys. Attribute-based encryption generalizes this: you can decrypt if your attributes satisfy a policy, like "doctor AND cardiology".

Both are built from pairings (Boneh-Franklin 2001, ciphertext-policy ABE 2007)[2, 3]. The authority can decrypt everything (key escrow), which limits where they fit. Used in some enterprise email encryption and access-control research.

Rests on

If any of these breaks, this breaks too.

If it falls

If this breaks, these break with it.

Nothing on the map depends on it: it is an end point, something people use directly.

References

  1. Adi Shamir. Identity-Based Cryptosystems and Signature Schemes. Advances in Cryptology, 1984. doi:10.1007/3-540-39568-7_5
  2. Dan Boneh and Matt Franklin. Identity-Based Encryption from the Weil Pairing. Advances in Cryptology — CRYPTO 2001. doi:10.1007/3-540-44647-8_13
  3. John Bethencourt, Amit Sahai and Brent Waters. Ciphertext-Policy Attribute-Based Encryption. 2007 IEEE Symposium on Security and Privacy (SP '07). doi:10.1109/sp.2007.11