Leakage Resilient CCA Security in Stronger Model: Branch Hidden ABO-LTFs and Their Applications. (4th January 2019)

• Record Type: Journal Article
• Authors: Zhao, Yi; Yu, Yong; Yang, Bo
• Editors: Mu, Yi
• Is Part Of: Computer journal. Volume 62:Number 4(2019)
• Page Start: 631
• Page End: 640
• Publication Date: 2019-01-04
• Subjects: ABO-LTFs -- branch hidden -- CCA security -- leakage resilience; Computers -- Periodicals; 005.1
• DOI: 10.1093/comjnl/bxy138
• Languages: English
• ISSNs: 0010-4620

Abstract

Abstract: Lossy trapdoor functions (LTFs) have already found various applications in cryptography with many priorities. But constructing leakage resilient (LR) CCA secure PKE schemes through this way received less attention. Existing works could only be proven secure in a weakened model due to the power of leakage attack. To address this problem, we introduce a new variant of ABO-LTF which is called branch hidden ABO-LTF (BHABO-LTF) in this paper. This primitive provides protection for the information of evaluated branches rather than lossy branches, which means even an adversary knows the information of the set of lossy branches, it can still not determine whether the output is evaluated on an injective or a lossy branch as long as the inversion key is kept secret. We observe that if this primitive has Chameleon property, we could present a generic construction of CCA secure PKE schemes. Due to the transparency of lossy branches of the primitive, we find that our construction can naturally be extended to accommodate leakage resilience. We give a generic construction with a realization of LR-BHABO-LTFs under the decisional composite residuosity assumption. This construction can be proved secure in a well-accepted security model rather than existing LTF-based ones in weak key-leakage model. Besides, without the need to hide the information of lossy branches, a Chameleon BHABO-LTF can be constructed by additively homomorphic CPA secure PKE alone. So our work can also be viewed as an interesting progress to give a construction of CCA secure PKE from additively homomorphic CPA secure PKE with certain properties as well as their LR counterparts, which has been a longstanding problem.