Author name cluster

Zirui Qiao

Possible papers associated with this exact author name in Arrow. This page groups case-insensitive exact name matches and is not a full identity disambiguation profile.

3 papers

1 author row

TCS Journal 2026 Journal Article

Leakage-resilient attribute-based encryption scheme with CCA security

Yanwei Zhou
Ran Xu
Zirui Qiao
Bo Yang

To ensure message security, including unforgeability and confidentiality, cryptographic techniques such as encryption, digital signatures, and security protocols are widely adopted. Conventional cryptographic schemes are typically proven secure under idealized models, where internal secrets remain hidden from external adversaries. However, in real-world implementations, side-channel attacks, such as electromagnetic analysis, power analysis, and timing attacks, can exploit physical leakage to compromise secret information. Consequently, in leakage-prone environments, cryptographic primitives previously deemed secure may no longer uphold their security guarantees. Recent research has thus focused on developing leakage-resilient cryptographic schemes to counteract such threats. While attribute-based encryption (ABE) scheme enables fine-grained access control, existing leakage-resilient ABE schemes only achieve chosen-plaintext attack (CPA) security and lack universality. To address this limitation, we present a generic construction for leakage-resilient ABE scheme based on an attribute-based hash proof system (AB-HPS) and an one-time lossy filter (OT-LF), proving its chosen-ciphertext attack (CCA) security. Furthermore, we introduce a novel cryptographic primitive termed two-key encapsulated attribute-based hash proof system (T-AB-HPS), which facilitates a more efficient CCA-secure leakage-resilient ABE construction from message authentication code (MAC). Specifically, our work makes two key contributions: (1) A generic framework for constructing CCA-secure leakage-resilient ABE scheme by integrating AB-HPS with an OT-LF. (2) An optimized and generalizable approach for designing CCA-secure leakage-resilient ABE scheme using T-AB-HPS in conjunction with a MAC.

Details DOI

TCS Journal 2025 Journal Article

A continuous leakage-amplified IBE scheme with perfect key update

Zirui Qiao
Yong Yu
Yanwei Zhou
Dong Zheng

In the practical deployment of cryptographic solutions, diverse applications pose unique challenges in terms of leakage resilience. The one-size-fits-all approach of traditional cryptographic primitives and fixed leakage-resilient ability often fails to satisfy the nuanced security demands of different scenarios. Recognizing this, the concept of a continuous Identity-based Encryption (IBE) scheme has been introduced. This innovative approach allows for the dynamic adjustment of private key lengths to tailor the system’s resistance to various leakage attacks, based on the specific needs of an application. Despite the strides made, the existing implementations of this scheme exhibit limitations, particularly in the aspect of key updates. The current method for key updates is incomplete, only updating some elements of the key. This process relies on a trapdoor mechanism, which results in suboptimal storage efficiency. This paper introduces a new continuous leakage amplified IBE scheme to address these shortcomings. This improved model features a comprehensive key update mechanism that enables users to refresh every element of the private key without utilizing a trapdoor. Our analysis confirms that this enhanced IBE scheme stands out for its security, efficiency, and practicality. Moreover, in pursuit of optimizing performance, we present a novel general construction. This construction illustrates that it is feasible to construct an IBE scheme resilient against chosen-ciphertext attacks, equipped with an impeccable update function, by building upon any semantically secure IBE scheme.

Details DOI

TCS Journal 2021 Journal Article

Continuous leakage-resilient certificate-based signcryption scheme and application in cloud computing

Yanwei Zhou
Yuan Xu
Zirui Qiao
Bo Yang
Mingwu Zhang

Leakage of private information, e. g. the secret keys, has become a serious threat to the security of computing systems. It has become a common requirement that real-world security applications should withstand various leakage attacks, such as side-channel attacks, cold-boot attacks, etc. For example, the above leakage attacks are very common in cloud computing nowadays. Hence, we need a novel method to protect the security of data storage and authorization even if a certain amount of leakage information with respect to the secret state can be obtained by any adversary. In order to achieve the above goal, in this paper, we introduce a continuous leakage-resilient certificate-based signcryption (CBS) scheme, and we prove that our proposed scheme achieves the chosen-ciphertext attacks (CCA) security based on the discrete logarithm assumption and the decisional Diffie-Hellman assumption. Our proposed scheme not only has the ability to resist the continuous leakage attacks, but also enjoys very low computational overheads. Moreover, two concrete continuous leakage-resilient data storage and authorization protocols are generated from the above continuous leakage-resilient CBS scheme: one has a single key generation center and the other generates the keys in a distributed form. Therefore, our protocols with continuous leakage resilience are particularly suitable for data storage and authorization in cloud computing system.

Details DOI