Decentralized Multi-authority ABE for DNFs from LWE

Pratish Datta*, Ilan Komargodski, Brent Waters

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

19 Scopus citations


We construct the first decentralized multi-authority attribute-based encryption (MA- ABE ) scheme for a non-trivial class of access policies whose security is based (in the random oracle model) solely on the Learning With Errors (LWE) assumption. The supported access policies are ones described by DNF formulas. All previous constructions of MA- ABE schemes supporting any non-trivial class of access policies were proven secure (in the random oracle model) assuming various assumptions on bilinear maps. In our system, any party can become an authority and there is no requirement for any global coordination other than the creation of an initial set of common reference parameters. A party can simply act as a standard ABE authority by creating a public key and issuing private keys to different users that reflect their attributes. A user can encrypt data in terms of any DNF formulas over attributes issued from any chosen set of authorities. Finally, our system does not require any central authority. In terms of efficiency, when instantiating the scheme with a global bound s on the size of access policies, the sizes of public keys, secret keys, and ciphertexts, all grow with s. Technically, we develop new tools for building ciphertext-policy ABE (CP- ABE ) schemes using LWE. Along the way, we construct the first provably secure CP- ABE scheme supporting access policies in NC1 under the LWE assumption that avoids the generic universal-circuit-based key-policy to ciphertext-policy transformation. In particular, our construction relies on linear secret sharing schemes with new properties and in some sense is more similar to CP- ABE schemes that rely on bilinear maps. While our CP- ABE construction is not more efficient than existing ones, it is conceptually intriguing and further we show how to extend it to get the MA- ABE scheme described above.

Original languageAmerican English
Title of host publicationAdvances in Cryptology – EUROCRYPT 2021 - 40th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Proceedings
EditorsAnne Canteaut, François-Xavier Standaert
PublisherSpringer Science and Business Media Deutschland GmbH
Number of pages33
ISBN (Print)9783030778699
StatePublished - 2021
Event40th Annual International Conference on the Theory and Applications of Cryptographic Techniques, EUROCRYPT 2021 - Zagreb, Croatia
Duration: 17 Oct 202121 Oct 2021

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume12696 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


Conference40th Annual International Conference on the Theory and Applications of Cryptographic Techniques, EUROCRYPT 2021

Bibliographical note

Publisher Copyright:
© 2021, International Association for Cryptologic Research.


Dive into the research topics of 'Decentralized Multi-authority ABE for DNFs from LWE'. Together they form a unique fingerprint.

Cite this