DOCSLIB.ORG

Outsourcing Data Storage Without Outsourcing Trust in Cloud Computing

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Outsourcing Data Storage Without Outsourcing Trust in Cloud Computing Outsourcing Data Storage without Outsourcing Trust in Cloud Computing by Aiiad A. Albeshri Bachelor of Science (Computer Science), KAU, Saudi Arabia – 2002 Master of Information Technology (QUT) – 2007 Thesis submitted in accordance with the regulations for Degree of Doctor of Philosophy School of Electrical Engineering and Computer Science Science and Engineering Faculty Queensland University of Technology July 2013 Keywords Cloud Computing, Cloud Security, Cloud Storage, Cloud Storage Se- curity, Geographic Assurance, Data Replication, Trust in the Cloud i ii Abstract Cloud computing has emerged as a major ICT trend and has been acknowledged as a key theme of industry by prominent ICT organisations. This new paradigm delivers a large pool of virtual and dynamically scalable resources, including com- putational power, storage, hardware platforms and applications, to users via In- ternet technologies. Examples of these benefits include increases in flexibility and budgetary savings through minimisation of hardware and software investments. It would appear that cloud customers are enthusiastic about being allowed to store their data in the cloud but at the same time they want personal satis- faction and the comfort of checking for themselves (or through a trusted third party) that their data is protected. The main theme of this thesis is to allow the users of the cloud services to outsource their data without the need to trust the cloud provider. Specifically, cloud customers will be able to verify the confiden- tiality, integrity, availability, fairness (or mutual non-repudiation), data freshness, geographic assurance and replication of their data. The thesis first addresses the security requirements for cloud storage as iden- tified from the literature. Then it aims to design secure storage architecture for data storage in the cloud. Architecture for a new approach for geographic location assurance is introduced, which combines the proof-of-storage protocol (POS) and the distance-bounding protocol. This allows the client to check where their stored data is located, without relying on the word of the cloud provider. Moreover, this iii research addresses the problem of the computational overhead at the server side when utilising typical POS schemes. A proposed architecture has been introduced to solve this issue. Finally, this research proposes a proof of data file replication scheme. This scheme allows cloud customers to verify that their stored data is replicated over multiple and diverse locations. iv To my parents, my wife Asma, my daughters Aroub & Maria. v vi Contents Keywords i Abstract iii Table of Contents vii List of Figures xiii List of Tables xv Glossary xvii Declaration xix Previously Published Material xxi 1 Introduction 1 1.1 Motivation . .5 1.2 Research Objectives . .6 1.3 Research Questions . .7 1.4 Research Outcomes . .9 1.5 Research Significance . 10 1.6 Thesis Outline . 11 vii 2 Cryptographic Background 13 2.1 Cryptographic and Coding Primitives . 14 2.1.1 Encryption . 14 2.1.2 Encoding . 15 2.1.3 Error-correcting Code . 16 2.1.4 Digital Signatures and Message Authentication Codes . 17 2.1.5 Exponentiation . 19 2.1.6 Pairing . 20 2.2 Merkle Hash Tree and Hash Chain . 21 2.3 Summary . 24 3 Background 25 3.1 Cloud Computing . 26 3.1.1 Cloud Computing vs. Grid Computing . 26 3.1.2 Advantages of Cloud Computing . 27 3.1.3 Cloud Service Models . 29 3.1.4 Cloud Deployment Models . 32 3.1.5 Cloud Computing Concerns . 35 3.2 Data Storage in The Cloud . 37 3.3 Security Requirements for Data Storage in Cloud . 39 3.3.1 Processed Data . 40 3.3.2 Stored Data . 43 3.4 Commercial Cloud Storage Providers . 47 3.4.1 Examples of Storage Providers . 48 3.4.2 Analysis of Security Requirements . 48 3.5 Proof-of-Storage (POS) Schemes . 52 3.5.1 POS for Static Data . 55 viii 3.5.2 POS for Dynamic Data . 59 3.6 Summary . 64 4 Combining Proofs of Retrievability and Fairness 67 4.1 CloudProof Overview . 68 4.2 DPOR Overview . 71 4.3 Proposed Architecture . 75 4.4 Security Analysis . 83 4.5 Discussion................................ 86 4.6 Summary . 88 5 GeoProof: Proofs of Geographic Location for Cloud Computing Environment 89 5.1 Introduction . 90 5.2 Review of Location Assurance . 92 5.2.1 Distance-bounding protocols . 92 5.2.2 Geolocation schemes . 97 5.3 Proof-of-Storage (POS) . 100 5.4 Proposed GeoProof Architecture . 101 5.4.1 Setup phase . 102 5.4.2 GeoProof protocol . 104 5.4.3 Security analysis . 106 5.4.4 Hard disk latency . 109 5.4.5 LAN latency . 111 5.4.6 Internet latency . 113 5.5 GeoProof for Dynamic Data . 114 5.6 Discussion . 115 5.7 Summary . 116 ix 6 Enhanced GeoProof: Improved Geographic Assurance for Data in the Cloud 119 6.1 Introduction . 120 6.2 GeoProof Limitations . 121 6.3 Generic Structure of POS schemes . 123 6.4 Enhanced GeoProof . 125 6.4.1 Generic Enhanced GeoProof . 125 6.4.1.1 Structure of Enhanced GeoProof . 127 6.4.1.2 Security Analysis . 128 6.4.1.3 Performance Analysis . 129 6.4.2 Concrete enhanced GeoProof . 130 6.4.2.1 Example One . 130 6.4.2.2 Example Two . 135 6.5 Summary . 138 7 Proof of Geographic Separation 141 7.1 Introduction . 142 7.2 Background and Related Work . 143 7.3 Proof of Data File Replication . 145 7.3.1 Structure of Proof of Replication . 147 7.3.2 Analysis . 149 7.3.2.1 Assumptions . 149 7.3.2.2 Protocol Security . 151 7.3.2.3 Performance Analysis . 153 7.4 Conclusion . 153 8 Conclusion and Future Directions 155 8.1 Summary of Contributions . 156 x 8.2 Future Directions . 157 8.3 Concluding Remarks . 158 A Security Controls in the Cloud 159 Appendix-A 159 A.1 Overview . 159 A.1.1 Compliance . 160 A.1.2 Data Governance . 161 A.1.3 Facility Security . 162 A.1.4 Human Resources Security . 162 A.1.5 Information Security . 163 A.1.6 Legal . 164 A.1.7 Operations Management . 165 A.1.8 Risk Management . 166 A.1.9 Release Management . 166 A.1.10 Resiliency . 167 A.1.11 Security Architecture . 168 A.2 Security Controls with Technical Enforceability . 168 A.2.1 Identity and Access Management . 169 A.2.2 Auditing and Continuous Monitoring . 171 A.2.3 Security Policies and Policy Enforcement . 172 A.2.4 Data Security and Cryptography . 175 A.2.5 Network Security . 176 A.3 Cloud Commercial Offering . 176 A.3.1 Service Type Provided . 177 A.3.2 Security Controls provided . 177 xi Bibliography 183 xii List of Figures 2.1 Basic Encryption . 14 2.2 Merkle Hash Tree . 22 2.3 Hash Chain . 23 3.1 Cloud Computing . 27 3.2 Advantages of Cloud Computing . 28 3.3 NIST Visual model of cloud computing [36] ............. 30 3.4 Public Cloud . 32 3.5 Private Cloud . 34 3.6 Community Cloud . 34 3.7 Hybrid Cloud . 35 3.8 The top concerns and challenges within cloud environment [68] . 36 3.9 Security Requirements for Data Storage . 40 3.10 Generic Overview of proof-of-storage Scheme (POS) . 53 4.1 Get Phase in CloudProof . 70 4.2 Put Phase in CloudProof . 70 4.3 Default verification in DPOR [125] . 72 4.4 Dynamic Data Modification in DPOR [125] . ..
Load more

Recommended publications
  • Public Auditing for Secure and Efficient Cloud Data Storage: a Comprehensive Survey
    Vol-7 Issue-4 2021 IJARIIE-ISSN(O)-2395-4396 Public Auditing for Secure and Efficient Cloud Data Storage: A Comprehensive Survey 1Ayesha Siddiqha Mukthar, 2Dr. Jitendra Sheetlani 1Research Scholar, Sri Satya Sai University of Technology and Medical Sciences, Sehore 2Associate Professor, Sri Satya Sai University of Technology and Medical Sciences, Sehore Abstract: Nowadays storage of data is big problem because the huge generation of multimedia data likes images, audio, video etc. whose size is very large. For storing of these data size of conventional storage is not sufficient so we need remote storage such as cloud which is resilient infrastructure, reliable and high quality performance for the cloud users. In the cloud there is no direct physical control over the records because the cloud uses its resource pool for storing. Consequently data reliability fortification and auditing is not a modest task. The user prerequisites to depend on a Third Party Auditor (TPA) who is working as a public auditor for authenticating the data integrity and privacy. This paper presents the various auditing techniques of cloud computing for improving security and then future research challenges which need to be adopt by researchers to make system obvious. Keywords: Auditing, Cloud Computing, Storage, TPA, Reliability, Integrity. Introduction: Cloud is offering the different services to its users. Data sharing between two organizations which common in many application areas. The current data sharing and integration among various organizations requires the central and trusted authority to collect data from all data sources and then integrate the collected data. In current trend, there is necessary condition which defines the data sharing while preserving privacy in cloud.
    [Show full text]
  • On the Implementation of Pairing-Based Cryptosystems a Dissertation Submitted to the Department of Computer Science and the Comm
    ON THE IMPLEMENTATION OF PAIRING-BASED CRYPTOSYSTEMS A DISSERTATION SUBMITTED TO THE DEPARTMENT OF COMPUTER SCIENCE AND THE COMMITTEE ON GRADUATE STUDIES OF STANFORD UNIVERSITY IN PARTIAL FULFILLMENT OF THE REQUIREMENTS FOR THE DEGREE OF DOCTOR OF PHILOSOPHY Ben Lynn June 2007 c Copyright by Ben Lynn 2007 All Rights Reserved ii I certify that I have read this dissertation and that, in my opinion, it is fully adequate in scope and quality as a dissertation for the degree of Doctor of Philosophy. Dan Boneh Principal Advisor I certify that I have read this dissertation and that, in my opinion, it is fully adequate in scope and quality as a dissertation for the degree of Doctor of Philosophy. John Mitchell I certify that I have read this dissertation and that, in my opinion, it is fully adequate in scope and quality as a dissertation for the degree of Doctor of Philosophy. Xavier Boyen Approved for the University Committee on Graduate Studies. iii Abstract Pairing-based cryptography has become a highly active research area. We define bilinear maps, or pairings, and show how they give rise to cryptosystems with new functionality. There is only one known mathematical setting where desirable pairings exist: hyperellip- tic curves. We focus on elliptic curves, which are the simplest case, and also the only curves used in practice. All existing implementations of pairing-based cryptosystems are built with elliptic curves. Accordingly, we provide a brief overview of elliptic curves, and functions known as the Tate and Weil pairings from which cryptographic pairings are derived. We describe several methods for obtaining curves that yield Tate and Weil pairings that are efficiently computable yet are still cryptographically secure.
    [Show full text]
  • Short Signatures from the Weil Pairing∗
    Short Signatures from the Weil Pairing∗ Dan Boneh† Ben Lynn Hovav Shacham [email protected] [email protected] [email protected] Abstract We introduce a short signature scheme based on the Computational Diffie-Hellman assump- tion on certain elliptic and hyper-elliptic curves. For standard security parameters, the signature length is about half that of a DSA signature with a similar level of security. Our short signature scheme is designed for systems where signatures are typed in by a human or are sent over a low-bandwidth channel. We survey a number of properties of our signature scheme such as signature aggregation and batch verification. 1 Introduction Short digital signatures are needed in environments with strong bandwidth constraints. For ex- ample, product registration systems often ask users to key in a signature provided on a CD label. When a human is asked to type in a digital signature, the shortest possible signature is needed. Similarly, due to space constraints, short signatures are needed when one prints a bar-coded digital signature on a postage stamp [50, 45]. As a third example, consider legacy protocols that allocate a fixed short field for non-repudiation [1, 32]. One would like to use the most secure signature that fits in the allotted field length. The two most frequently used signatures schemes, RSA and DSA, produce relatively long sig- natures compared to the security they provide. For example, when one uses a 1024-bit modulus, RSA signatures are 1024 bits long. Similarly, when one uses a 1024-bit modulus, standard DSA signatures are 320 bits long.
    [Show full text]
  • Multi-Use Unidirectional Proxy Re-Signatures Benoît Libert, Damien Vergnaud
    Multi-Use Unidirectional Proxy Re-Signatures Benoît Libert, Damien Vergnaud To cite this version: Benoît Libert, Damien Vergnaud. Multi-Use Unidirectional Proxy Re-Signatures. 2008 ACM Con- ference on Computer and Communications Security, CCS 2008, 2008, Alexandria, United States. pp.511-520, 10.1145/1455770.1455835. inria-00357568 HAL Id: inria-00357568 https://hal.inria.fr/inria-00357568 Submitted on 30 Jan 2009 HAL is a multi-disciplinary open access L’archive ouverte pluridisciplinaire HAL, est archive for the deposit and dissemination of sci- destinée au dépôt et à la diffusion de documents entific research documents, whether they are pub- scientifiques de niveau recherche, publiés ou non, lished or not. The documents may come from émanant des établissements d’enseignement et de teaching and research institutions in France or recherche français ou étrangers, des laboratoires abroad, or from public or private research centers. publics ou privés. Multi-Use Unidirectional Proxy Re-Signatures? Beno^ıtLibert1 and Damien Vergnaud2 1 Universit´eCatholique de Louvain, Microelectronics Laboratory Place du Levant, 3 { 1348 Louvain-la-Neuve { Belgium 2 Ecole Normale Sup´erieure{ C.N.R.S. { I.N.R.I.A. 45, Rue d'Ulm { 75230 Paris CEDEX 05 { France Abstract. In 1998, Blaze, Bleumer, and Strauss suggested a cryptographic primitive termed proxy re-signature in which a proxy transforms a signature computed under Alice's secret key into one from Bob on the same message. The proxy is only semi-trusted in that it cannot learn any signing key or sign arbitrary messages on behalf of Alice or Bob. At CCS 2005, Ateniese and Hohenberger revisited this primitive by providing appropriate security definitions and efficient constructions in the random oracle model.
    [Show full text]
  • Implementation Issues in the Construction of an Application Framework for Secure SMS Messages on Android Smartphones
    SECURWARE 2015 : The Ninth International Conference on Emerging Security Information, Systems and Technologies Implementation Issues in the Construction of an Application Framework for Secure SMS Messages on Android Smartphones Alexandre Melo Braga12, Romulo Zanco Neto1, André Luiz Vannucci1, and Ricardo Shiguemi Hiramatsu1 1 Centro de Pesquisa e Desenvolvimento em Telecomunicações (Fundação CPqD) Campinas, São Paulo, Brazil 2 Universidade Estadual de Campinas (UNICAMP) Campinas, São Paulo, Brazil Email:{ambraga,romulozn,vannucci,ricardoh}@cpqd.com.br Abstract—This paper details the construction of an application bytes long, but provide the same security level of framework for SMS security that provides secrecy, integrity, conventional signatures with at least twice its size. Such a authentication, and non-repudiation for SMS messages. The small length saves space in message payload, so that an proposed framework integrates authenticated encryption and authenticated message can occupy only a single SMS. short digital signatures to management services for The resulting application framework for SMS security is cryptographic keys and digital certificates. The framework part of an integrated infrastructure for mobile security on hides from final users all details concerning certificate and key mobile devices [5][6], that provides strong cryptography management. A flexible trade-off between security objectives [3][4] to security-aware mobile applications [1][2]. and message length makes it possible to offer three levels of The text is organized as follows. Section II offers security: (i) secrecy only, (ii) secrecy and message background information about SMS internal workings. authentication, and (iii) secrecy, origin authentication and non- repudiation. The main contribution is the use of short Section III provides related work on SMS security.
    [Show full text]
  • Report on Pairing-Based Cryptography
    Volume 120 (2015) http://dx.doi.org/10.6028/jres.120.002 Journal of Research of the National Institute of Standards and Technology Report on Pairing-based Cryptography Dustin Moody, Rene Peralta, Ray Perlner, Andrew Regenscheid, Allen Roginsky, and Lily Chen National Institute of Standards and Technology, Gaithersburg, MD 20899 [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] This report summarizes study results on pairing-based cryptography. The main purpose of the study is to form NIST’s position on standardizing and recommending pairing-based cryptography schemes currently published in research literature and standardized in other standard bodies. The report reviews the mathematical background of pairings. This includes topics such as pairing-friendly elliptic curves and how to compute various pairings. It includes a brief introduction to existing identity-based encryption (IBE) schemes and other cryptographic schemes using pairing technology. The report provides a complete study of the current status of standard activities on pairing-based cryptographic schemes. It explores different application scenarios for pairing-based cryptography schemes. As an important aspect of adopting pairing-based schemes, the report also considers the challenges inherent in validation testing of cryptographic algorithms and modules. Based on the study, the report suggests an approach for including pairing-based cryptography schemes in the NIST cryptographic toolkit. The report also outlines several questions that will require further study if this approach is followed. Key words: IBE; identity-based encryption; pairing-based cryptography; pairings. Accepted: January 21, 2015 Published: February 3, 2015 http://dx.doi.org/10.6028/jres.120.002 1.
    [Show full text]
  • Privately Outsourcing Exponentiation to a Single Server: Cryptanalysis and Optimal Constructions
    Privately Outsourcing Exponentiation to a Single Server: Cryptanalysis and Optimal Constructions C´elineChevalier∗ Fabien Laguillaumiey Damien Vergnaudz Abstract We address the problem of speeding up group computations in cryptography using a single untrusted computational resource. We analyze the security of an efficient protocol for securely outsourcing multi- exponentiations proposed at ESORICS 2014. We show that this scheme does not achieve the claimed security guarantees and we present several practical polynomial-time attacks on the delegation protocol which allows the untrusted helper to recover part (or the whole) of the device secret inputs. We then pro- vide simple constructions for outsourcing group exponentiations in different settings (e.g. public/secret, fixed/variable bases and public/secret exponents). Finally, we prove that our attacks on the ESORICS 2014 protocol are unavoidable if one wants to use a single untrusted computational resource and to limit the computational cost of the limited device to a constant number of (generic) group operations. In particular, we show that our constructions are actually optimal. Keywords. Secure outsource computation, Cryptanalysis, Coppersmith methods, Protocols, Optimal- ity results 1 Introduction We address the problem of \outsourcing" computation from a (relatively) weak computational device to a more powerful entity. This problem has been considered in various settings since many years (distributed- computing projects { e.g., Mersenne prime search { or cloud computing) but the proliferation of mobile devices, such as smart phones or RFID tags, provides yet another venue in which a computationally weak device would like to be able to outsource a costly operation to a third party helper. Low-cost RFID tags do not usually have the computational or memory resources to perform complex cryptographic operations and it is natural to outsource these operations to some helper.
    [Show full text]
  • Real-Time Digital Signatures for Time-Critical Networks
    IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY, VOL. 12, NO. 11, NOVEMBER 2017 2627 Real-Time Digital Signatures for Time-Critical Networks Attila Altay Yavuz, Member, IEEE, Anand Mudgerikar, Ankush Singla, Ioannis Papapanagiotou, Senior Member, IEEE, and Elisa Bertino Fellow, IEEE Abstract— The secure and efficient operation of time-critical infrastructures possible. Such infrastructures will usher networks, such as vehicular networks, smart-grid, and other automation in a large number of application domains such as smart-infrastructures, is of primary importance in today’s soci- transportation, manufacturing, smart-grid and urban life (e.g. ety. It is crucial to minimize the impact of security mechanisms over such networks so that the safe and reliable operations Smart-city). of time-critical systems are not being interfered. For instance, Because of their control capabilities and pervasive data if the delay introduced by the crypto operations negatively acquisition, securing such smart-infrastructures is a critical affects the time available for braking a car before a collision, requirement. Even though many security techniques are avail- the car may not be able to safely stop in time. In particular, able, their application to smart infrastructures is not straight- as a primary authentication mechanism, existing digital signa- tures introduce a significant computation and communication forward, especially when such infrastructures are based on overhead, and therefore are unable to fully meet the real-time networks that include mobile devices, and for safety reasons, processing requirements of such time-critical networks. In this they have to meet real-time requirements. We refer to such paper, we introduce a new suite of real-time digital signatures networks as time-critical networks.
    [Show full text]
  • View the Index
    INDEX OF TERMS 2013, 2 Axolotl, 11 65537, 2 Backdoor, 11 A5/0, 2 Backtracking resistance, 11 A5/1, 2 Backward secrecy, 11 A5/2, 3 Base64, 12 A5/3, 3 BassOmatic, 12 A5/4, 3 BB84, 12 Adaptive attack, 3 bcrypt, 12 AEAD (authenticated encryption Biclique cryptanalysis, 13 with associated data) , 3 BIKE (Bit Flipping Key AES (Advanced Encryption Encapsulation), 13 Standard), 4 BIP (Bitcoin improvement AES-CCM, 4 proposal), 13 AES-GCM, 5 Bit Gold, 14 AES-GCM-SIV, 5 Bitcoin, 14 AES-NI, 5 Black, 14 AES-SIV, 6 BLAKE, 14 AIM (Advanced INFOSEC Machine), 6 BLAKE2, 14 AKA, 6 BLAKE3, 14 AKS (Agrawal–Kayal–Saxena), 7 Bleichenbacher attack, 15 Algebraic cryptanalysis, 7 Blind signature, 15 Alice, 7 Block cipher, 16 All-or-nothing transform (AONT), 7 Blockchain, 16 Anonymous signature, 8 Blockcipher, 17 Applied Cryptography, 8 Blowfish, 17 Applied cryptography, 8 BLS (Boneh-Lynn-Shacham) ARC4, 8 signature, 17 Argon2, 8 Bob, 18 ARX (Add-Rotate-XOR), 9 Boolean function, 18 ASIACRYPT, 9 Boomerang attack, 18 Asymmetric cryptography, 9 BQP (bounded-error quantum Attack, 9 polynomial time), 19 Attribute-based encryption (ABE), 10 Braid group cryptography, 19 Authenticated cipher, 11 Brainpool curves, 19 Break-in recovery, 20 Cryptologia, 29 Broadcast encryption, 20 Cryptology, 29 Brute-force attack, 20 Cryptonomicon, 29 Bulletproof, 20 Cryptorchidism, 30 Byzantine fault tolerance, 21 Cryptovirology, 30 CAESAR, 21 CRYPTREC, 30 Caesar’s cipher, 22 CSIDH (Commutative Supersingular CAVP (Cryptographic Algorithm Isogeny Diffie–Hellman), 30 Validation Program), 22
    [Show full text]
  • On Instantiating Pairing-Based Protocols with Elliptic Curves of Embedding Degree One
    ON INSTANTIATING PAIRING-BASED PROTOCOLS WITH ELLIPTIC CURVES OF EMBEDDING DEGREE ONE SANJIT CHATTERJEE, ALFRED MENEZES, AND FRANCISCO RODR´IGUEZ-HENR´IQUEZ Abstract. Since the discovery of identity-based encryption schemes in 2000, bilinear pair- ings have been used in the design of hundreds of cryptographic protocols. The most com- monly used pairings are constructed from elliptic curves over finite fields with small em- bedding degree. These pairings can have different security, performance, and functionality characteristics, and were therefore classified into Types 1, 2, 3 and 4. In this paper, we observe that this conventional classification is not applicable to pairings from elliptic curves with embedding degree one. It is important to understand the security, efficiency, and func- tionality of these pairings in light of recent attacks on certain pairings constructed from elliptic curves with embedding degree greater than one. We define three kinds of pairings from elliptic curves with embedding degree one, discuss some subtleties with using them to implement pairing-based protocols, and provide an estimated cost of implementing them on modern processors. 1. Introduction Let G1, G2 and GT be groups of prime order n. A cryptographic pairing e : G1 ×G2 ! GT is a map that is bilinear, non-degenerate and efficiently computable. Since 2000, when Boneh and Franklin proposed their identity-based encryption scheme [11], cryptographic pairings have been used extensively to design a wide variety of cryptographic protocols. Cryptographic pairings are constructed from elliptic curves of small embedding degree. More precisely, let E be an elliptic curve defined over the finite field Fq. Let n be a prime divisor of #E(Fq) with gcd(n; q) = 1, and let k be the smallest positive integer such that k n j q − 1; the number k is called the embedding degree of E (with respect to n).
    [Show full text]
  • A ABE, See Attribute-Based Encryption (ABE) Additive Inverse Addition and Subtraction Property, 7, 8 Inverse Addition and Subtra
    Index A B ABE, see Attribute-based encryption (ABE) Baby-step giant-step algorithm, 30–31 Additive inverse Bilinear mapping, 20, 26–27, 34–35 addition and subtraction property, 7, 8 Blind signature schemes inverse Chaum’s RSA, 252–253 addition and subtraction property, 7, 8 Okomoto-Schnorr protocol, 254–255 modular arithmetic, 7 Schnorr protocol, 253–254 and multiplicative inverse, 2 BLS short signature/BLS signature scheme, notation, 158–161 260 Asymmetric encryption (ASE), 82 Boneh-Boyen IBE, 152–156 Asymmetric key cryptography, 37, 104, 113, algorithm 244 decryption, 155 Attribute-based encryption (ABE) encryption, 155 access policy, 230–231 extract, 154, 155 basic model basic scheme complexity assumptions, 230 additive notation, 158 categories decrypting, 160–161 CP-ABE, 235–237 encryption, 160 KP-ABE, 233–235 private key extraction, 60 comparisons, 239–240 security, 167–169 difference, 237 setup of parameters, 158–160 encryption, 226 classification of IBE schemes, 156–157 IBE, 228 full scheme literature review, 238–239 decrypting, 167 PKI, 227, 228 encrypting, 166 public key encryption, 226–227 private key extraction, 166 security, 225, 240 setup of parameters, 165–166 working, 231–233 HIBE Attributes decryption, 199 Boneh-Franklin IBE, 138 encryption, 198 FIBE, 206 extraction of the private key, 198 public parameters, 162 setup, 197–198 See also Attribute-based encryption (ABE) limitation, 152 © Springer Nature Switzerland AG 2021 303 K. A. B. Ahmad et al. (eds.), Functional Encryption, EAI/Springer Innovations in Communication and
    [Show full text]
  • Análisis E Implementación Eficiente De Protocolos Criptográficos De Llave
    Centro de Investigacion´ y de Estudios Avanzados del Instituto Politecnico´ Nacional Unidad Zacatenco Departamento de Computacion´ An´alisis e implementaci´oneficiente de protocolos criptogr´aficosde llave p´ublica Tesis que presenta Jos´eEduardo Ochoa Jim´enez para obtener el grado de Doctor en Ciencias en Computaci´on Director de tesis Dr. Francisco Jos´eRamb´oRodr´ıguezHenr´ıquez Ciudad de M´exico Febrero, 2019 ii Center for Research and Advanced Studies of National Polytechnic Institute Zacatenco campus Computer science department Analysis and efficient implementation of public key cryptographic protocols Submitted by Jos´eEduardo Ochoa Jim´enez for the degree of Ph.D. in Computer Science Advisor Francisco Jos´eRamb´oRodr´ıguezHenr´ıquez,Ph.D. Mexico City February, 2019 iv Dedication To my family. v vi Acknowledgements I thank my advisor Francisco Rodr´ıguez-Henr´ıquezfor his guidance and support during my Ph.D. studies. I also thank my friends from the cryptography laboratory for sharing their knowledge and for having shared with me hard and good times. I thank the Consejo Nacional de Ciencia y Tecnolog´ıaCONACyT for the scholarship pro- vided to me during the period that I was a Ph.D. candidate at Cinvestav. And finally, a special thanks to the Department staff who supported me during my Ph.D. research. vii viii Resumen Durante las ´ultimascuatro d´ecadas,el paradigma de la criptograf´ıa de llave p´ublica ha brindado soluciones elegantes a diversos problemas dif´ıcilesque surgen de aplicaciones contempor´aneasde seguridad de la informaci´on.Ejemplos de estos problemas incluyen: au- tenticaci´onde entidades, anonimato, no repudio, por nombrar s´oloalgunos.
    [Show full text]