Function-Private Functional Encryption in the Private-Key Setting

Zvika Brakerski, Gil Segev*

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

20 Scopus citations


Functional encryption supports restricted decryption keys that allow users to learn specific functions of the encrypted messages. Although the vast majority of research on functional encryption has so far focused on the privacy of the encrypted messages, in many realistic scenarios it is crucial to offer privacy also for the functions for which decryption keys are provided. Whereas function privacy is inherently limited in the public-key setting, in the private-key setting it has a tremendous potential. Specifically, one can hope to construct schemes where encryptions of messages m1, … , mT together with decryption keys corresponding to functions f1, … , fT, reveal essentially no information other than the values {fi(mj)}i,j∈[T]. Despite its great potential, the known function-private private-key schemes either support rather limited families of functions (such as inner products) or offer somewhat weak notions of function privacy. We present a generic transformation that yields a function-private functional encryption scheme, starting with any non-function-private scheme for a sufficiently rich function class. Our transformation preserves the message privacy of the underlying scheme and can be instantiated using a variety of existing schemes. Plugging in known constructions of functional encryption schemes, we obtain function-private schemes based either on the learning with errors assumption, on obfuscation assumptions, on simple multilinear-maps assumptions, and even on the existence of any one-way function (offering various trade-offs between security and efficiency).

Original languageAmerican English
Pages (from-to)202-225
Number of pages24
JournalJournal of Cryptology
Issue number1
StatePublished - 1 Jan 2018

Bibliographical note

Publisher Copyright:
© 2017, International Association for Cryptologic Research.


  • Function privacy
  • Functional encryption
  • Symmetric encryption


Dive into the research topics of 'Function-Private Functional Encryption in the Private-Key Setting'. Together they form a unique fingerprint.

Cite this