Multi-Client Functional Encryption with Fine-Grained Access Control
Thời gian: 14:00 đến 15:30 Ngày 05/04/2023
Địa điểm: C101, VIASM
Speaker: Ky Nguyen (DIENS, École normale supérieure, CNRS, PSL University, Paris, France)
Abstract: Multi-Client Functional Encryption (MCFE) and Multi-Input Functional Encryption (MIFE) are very interesting extensions of Functional Encryption for practical purpose. They allow to compute joint function over data from multiple parties. Both primitives are aimed at applications in multi-user settings where decryption can be correctly output for users with appropriate functional decryption keys only. While the definitions for a single user or multiple users were quite general and can be realized for general classes of functions as expressive as Turing machines or all circuits, efficient schemes have been proposed so far for concrete classes of functions: either only for access control, i.e. the identity function under some conditions, or linear/quadratic functions under no condition.
This talk focuses on classes of functions that explicitly combine some evaluation functions independent of the decryptor under the condition of some access control. More precisely, we introduce a framework for MCFE with fine-grained access control and propose constructions for both single-client and multi-client settings, for inner-product evaluation and access control via Linear Secret Sharing Schemes, with selective and adaptive security.
The only known work that combines functional encryption in multi-user setting with access control was proposed by Abdalla et al. (Asiacrypt '20), which relies on a generic transformation from the single-client schemes to obtain MIFE schemes that suffer a quadratic factor n (where n denotes the number of clients) in the total communication. We follow a different path, via MCFE: we present a duplicate-and-compress technique to transform the single-client scheme and obtain a MCFE with fine-grained access control scheme with only a linear factor of n in the total communication.
Our final scheme can be made to allow encrypting clients' subvectors with possible repetitions and thus outperforms the Abdalla et al.'s scheme in terms of efficiency, as one can obtain MIFE from the aforementioned MCFE by making all the labels in MCFE a fixed public constant. The concrete constructions are secure under the SXDH assumption, in the random oracle model for the MCFE scheme, but in the standard model for the MIFE improvement.
Joint work with Duong Hieu Phan and David Pointcheval
Article link: https://eprint.iacr.org/2022/215