Practical Signcryption

by Dent, Alexander W.; Zheng, Yuliang; Yung, Moti

• ISBN13: 9783540894094
• ISBN10: 3540894098
• Format: Hardcover
• Copyright: 2010-11-29
• Publisher: Springer-Verlag New York Inc

Summary

In today's world, data must be sent around the world cheaply and securely, and that requires origin authentication, integrity protection, and confidentiality ' the recipient of a message should be able to ascertain who sent the message, be sure that the message has not been changed en route, and be sure that the data arrives without having been read by anyone else.The second editor invented signcryption, an area of cryptography that studies systems that simultaneously provide origin authentication, integrity protection and confidentiality for data. Signcryption schemes combine the features of digital signature schemes with those of public-key encryption schemes and aim to provide security guarantees in a way that is provably correct and significantly less computationally expensive than the 'œencrypt-then-sign' method most commonly adopted in public-key cryptography. This is the first comprehensive book on signcryption, and brings together leading authors from the field of cryptography in a discussion of the different methods for building efficient and secure signcryption schemes, and the ways in which these schemes can be used in practical systems. Chapters deal with the theory of signcryption, methods for constructing practical signcryption schemes, and the advantages of using such schemes in practical situations. The book will be of benefit to cryptography researchers, graduate students and practitioners.

Table of Contents

Introduction	p. 1
Historical Development of Signcryption	p. 1
Coded Modulation	p. 1
Musings on Blending	p. 2
Signcryption	p. 5
Provably Secure Signcryption	p. 7
Extensions, Standardization, and Future Research Directions	p. 8
Notation and Security Notions	p. 9
Algorithms and Assignment	p. 10
Signature Schemes	p. 11
Public Key Encryption	p. 14
Symmetric Encryption	p. 16
Message Authentication Codes	p. 18
Security Models for Signcryption
Security for Signcryption: The Two-User Model	p. 21
Introduction	p. 21
Definition of Signcryption in the Two-User Setting	p. 23
Two Security Notions in the Two-User Setting	p. 23
Discussions on the Security Notions	p. 28
Generic Compositions of Signature and Encryption	p. 30
Construction	p. 30
Security of the Parallel Composition Method	p. 31
Security of the Sequential Composition Methods	p. 32
Multi-user Setting	p. 39
Syntax	p. 39
Security	p. 40
Extending Signcryption	p. 40
Security for Signcryption: The Multi-User Model	p. 43
Introduction	p. 43
The BSZ Model	p. 44
Confidentiality of Signcryption in the Multi-User BSZ Model	p. 44
Unforgeability of Signcryption in the Multi-User BSZ Model	p. 47
Further Discussions on the Multi-User BSZ Model	p. 50
Example: The Security of Zheng's Signcryption Scheme in the BSZ Model	p. 51
Signcryption Schemes
Signcryption Schemes Based on the Diffie-Hellman Problem	p. 57
Introduction	p. 57
Diffie-Hellman Problems	p. 58
Zheng's Construction and Its Variants	p. 59
Zheng's Original Scheme	p. 59
The Bao-Deng Modification	p. 62
A Modification with Public Verifiability	p. 62
An Encrypt-then-Sign Composition	p. 63
A Scheme with Unforgeability Based on Factoring	p. 64
Schemes with Non-repudiation	p. 66
A DSA-Based Construction	p. 66
A Scheme Built on Schnorr's Signature Scheme	p. 67
The CM Scheme	p. 68
Signcryption Schemes Based on Bilinear Maps	p. 71
Introduction	p. 71
Bilinear Map Groups	p. 72
Assumptions	p. 73
Signcryption for Anonymous Communications	p. 74
Message Privacy	p. 75
Ciphertext Unforgeability and Signature Unforgeability	p. 76
Anonymity	p. 77
A Tightly Secure Scheme	p. 78
The Scheme	p. 78
Efficiency	p. 79
Security	p. 80
A Scheme with Short Detachable Signatures	p. 86
Efficiency	p. 88
Anonymous Communications	p. 88
Security	p. 89
Signcryption Schemes Based on the RSA Problem	p. 99
Introduction	p. 99
The RSA Transform	p. 100
Dedicated RSA-Based Signcryption Schemes	p. 101
Signcryption from Padding Schemes	p. 102
Trapdoor Permutations	p. 102
Extractable Commitments	p. 102
Padding-Based Signcryption Schemes	p. 104
Proof Intuition	p. 109
Signcryption Based on RSA-TBOS	p. 110
The TBOS Construction	p. 110
Security Proof for the TBOS Signcryption Scheme	p. 112
Construction Techniques
Hybrid Signcryption	p. 121
Background	p. 121
A Brief Word on Notation	p. 123
Preliminaries	p. 123
The Hybrid Framework	p. 123
Security Criteria for Data Encapsulation Mechanisms	p. 125
Hybrid Signcryption with Outsider Security	p. 126
An Outsider-Secure Signcryption KEM	p. 126
Security Criteria for Outsider-Secure Signcryption KEMs	p. 127
Security of the SKEM+DEM Construction	p. 130
Outsider-Secure Hybrid Signcryption in Practice	p. 133
Hybrid Signcryption with Insider Security	p. 136
From Outsider to Insider Security	p. 136
Signcryption Tag-KEMs	p. 138
Security Criteria for Signcryption Tag-KEMs	p. 140
Security of the SCTK+DEM Construction	p. 143
Insider-Secure Hybrid Signcryption in Practice	p. 146
Concealment and Its Applications to Authenticated Encryption	p. 149
Introduction	p. 149
Domain Extension of Authenticated Encryption	p. 150
Remotely Keyed Authenticated Encryption	p. 152
Definition of Concealment	p. 155
Syntax	p. 155
Security of Concealment	p. 156
Relaxed Concealments	p. 157
Super-Relaxed Concealments	p. 157
Comparison to Commitment	p. 157
Constructing Concealment Schemes	p. 158
Achieving Hiding	p. 158
Achieving Binding	p. 159
Necessity of Assumptions	p. 162
Applications to Authenticated Encryption	p. 163
Definition of Authenticated Encryption	p. 164
Authenticated Encryption of Long Messages	p. 166
Remotely Keyed Authenticated Encryption	p. 169
Parallel Signcryption	p. 175
Introduction	p. 175
Concept of Parallel Signcryption	p. 175
Overview of Constructions	p. 176
Generic Parallel Signcryption	p. 178
Description of the Scheme	p. 178
Security Analysis	p. 180
Optimal Parallel Signcryption	p. 185
Description of the Scheme	p. 185
Security Analysis	p. 187
Extensions of Signcryption	p. 195
Identity-Based Signcryption	p. 195
Introduction	p. 195
Identity-Based Cryptography	p. 195
Advantages and Disadvantages	p. 197
From IBE to Signcryption	p. 199
Specifying an IBSC System	p. 200
Concrete IBSC from Pairings	p. 201
The Identity-Based Signcryption Primitive	p. 202
Security Definitions	p. 203
Message Confidentiality	p. 206
Signature Non-repudiation	p. 207
Ciphertext Unlinkability	p. 208
Ciphertext Authentication	p. 209
Ciphertext Anonymity	p. 210
A Concrete IBSC Scheme	p. 211
The Boneh-Franklin Framework	p. 211
Fully Secure IBSC Construction	p. 212
A Performance/Security Trade-Off	p. 215
Signcrypting for Multiple Recipients	p. 215
Key Establishment Using Signcryption Techniques	p. 217
Introduction	p. 217
Formal Security Models for Key Establishment	p. 219
Motivation	p. 219
Sessions	p. 220
The Formal Security Model	p. 221
Entity Authentication	p. 223
Forward Secrecy	p. 224
Key Compromise Impersonation Attacks	p. 224
Notation	p. 224
Key Transport	p. 225
Key Establishment Based on Zheng's Signcryption Scheme	p. 226
Key Agreement Based on Signcryption KEMs	p. 227
Key Agreement Based on Signcryption KEMs	p. 229
Key Agreement Based on Signcryption Tag-KEMs	p. 230
Security Proof for the Bjørstad-Dent Protocol	p. 232
Key Establishment Based on Timestamps	p. 239
Applications of Signcryption	p. 241
Applications Fields of Signcryption	p. 241
Example Applications of Signcryption	p. 242
Secure Multicasting Over the Internet	p. 243
Authenticated Key Recovery	p. 246
Secure ATM Networks	p. 248
Secure Routing for Mobile Ad Hoc Networks	p. 249
Encrypted and Authenticated E-mail by Firewalls	p. 251
Signcryption in Secure VoIP	p. 252
Applications to Electronic Payment	p. 253
References	p. 257
Index	p. 269
Table of Contents provided by Ingram. All Rights Reserved.