Abstract
Functional encryption supports restricted decryption keys that allow users to learn specific functions of the encrypted messages. Although the vast majority of research on functional encryption has so far focused on the privacy of the encrypted messages, in many realistic scenarios it is crucial to offer privacy also for the functions for which decryption keys are provided. Whereas function privacy is inherently limited in the public-key setting, in the private-key setting it has a tremendous potential. Specifically, one can hope to construct schemes where encryptions of messages m1, … , mT together with decryption keys corresponding to functions f1, … , fT, reveal essentially no information other than the values {fi(mj)}i,j∈[T]. Despite its great potential, the known function-private private-key schemes either support rather limited families of functions (such as inner products) or offer somewhat weak notions of function privacy. We present a generic transformation that yields a function-private functional encryption scheme, starting with any non-function-private scheme for a sufficiently rich function class. Our transformation preserves the message privacy of the underlying scheme and can be instantiated using a variety of existing schemes. Plugging in known constructions of functional encryption schemes, we obtain function-private schemes based either on the learning with errors assumption, on obfuscation assumptions, on simple multilinear-maps assumptions, and even on the existence of any one-way function (offering various trade-offs between security and efficiency).
Original language | English |
---|---|
Pages (from-to) | 202-225 |
Number of pages | 24 |
Journal | Journal of Cryptology |
Volume | 31 |
Issue number | 1 |
DOIs | |
State | Published - 1 Jan 2018 |
Bibliographical note
Publisher Copyright:© 2017, International Association for Cryptologic Research.
Keywords
- Function privacy
- Functional encryption
- Symmetric encryption