Attribute-based encryption(ABE)is a type of encryption derived from identity-based encryption,implementing access control over encrypted data based on attributes rather than on specific identities.SM9 is the Chinese n...Attribute-based encryption(ABE)is a type of encryption derived from identity-based encryption,implementing access control over encrypted data based on attributes rather than on specific identities.SM9 is the Chinese national standard for identity-based cryptography.This paper presents two novel key-policy attribute-based encryption(KPABE)designs based on SM9.The first scheme operates in a small attribute universe,while the second scheme caters to a large universe where the size of public parameters is only proportional to the maximum number of attributes used for encryption.Both schemes have a similar private-key/ciphertext structure to the original SM9 identity-based encryption algorithm,enabling effective integration into information systems built on SM9.Further,both schemes are selectively secure under the(f,g)-GDDHE assumption.Extensive experiments show that both schemes are comparable to other classical KP-ABE schemes,in terms of the communication and computational costs.We believe the proposed schemes will expedite the implementation of SM9 in distributed computing systems such as cloud computing and blockchain.展开更多
基金supported by the National Natural Science Foundation of China under Grant Nos.62032005,62372108,and 6197-2094。
文摘Attribute-based encryption(ABE)is a type of encryption derived from identity-based encryption,implementing access control over encrypted data based on attributes rather than on specific identities.SM9 is the Chinese national standard for identity-based cryptography.This paper presents two novel key-policy attribute-based encryption(KPABE)designs based on SM9.The first scheme operates in a small attribute universe,while the second scheme caters to a large universe where the size of public parameters is only proportional to the maximum number of attributes used for encryption.Both schemes have a similar private-key/ciphertext structure to the original SM9 identity-based encryption algorithm,enabling effective integration into information systems built on SM9.Further,both schemes are selectively secure under the(f,g)-GDDHE assumption.Extensive experiments show that both schemes are comparable to other classical KP-ABE schemes,in terms of the communication and computational costs.We believe the proposed schemes will expedite the implementation of SM9 in distributed computing systems such as cloud computing and blockchain.
