Leakage-resilient attribute-based encryption scheme with CCA security

To ensure message security, including unforgeability and confidentiality, cryptographic techniques such as encryption, digital signatures, and security protocols are widely adopted. Conventional cryptographic schemes are typically proven secure under idealized models, where internal secrets remain hidden from external adversaries. However, in real-world implementations, side-channel attacks, such as electromagnetic analysis, power analysis, and timing attacks, can exploit physical leakage to compromise secret information. Consequently, in leakage-prone environments, cryptographic primitives previously deemed secure may no longer uphold their security guarantees. Recent research has thus focused on developing leakage-resilient cryptographic schemes to counteract such threats. While attribute-based encryption (ABE) scheme enables fine-grained access control, existing leakage-resilient ABE schemes only achieve chosen-plaintext attack (CPA) security and lack universality. To address this limitation, we present a generic construction for leakage-resilient ABE scheme based on an attribute-based hash proof system (AB-HPS) and an one-time lossy filter (OT-LF), proving its chosen-ciphertext attack (CCA) security. Furthermore, we introduce a novel cryptographic primitive termed two-key encapsulated attribute-based hash proof system (T-AB-HPS), which facilitates a more efficient CCA-secure leakage-resilient ABE construction from message authentication code (MAC). Specifically, our work makes two key contributions: (1) A generic framework for constructing CCA-secure leakage-resilient ABE scheme by integrating AB-HPS with an OT-LF. (2) An optimized and generalizable approach for designing CCA-secure leakage-resilient ABE scheme using T-AB-HPS in conjunction with a MAC.

Authors

• Yanwei Zhou
• Ran Xu Salesforce AI Research
• Zirui Qiao
• Bo Yang Information Engineering University

Keywords

• Attribute-based encryption
• Attribute-based hash proof system
• Leakage resilience
• CCA security