JUCS - Journal of Universal Computer Science 25(3): 158-181, doi: 10.3217/jucs-025-03-0158
Natural sd-RCCA Secure Public-key Encryptions from Hybrid Paradigms
expand article infoYuan Chen‡, Qingkuan Dong‡, Yannan Li§, Qiqi Lai|, Zhedong Wang|
‡ Xidian University, Xi'an, China§ University of Wollongong, Wollongong, Australia| Florida Atlantic University, Boca Raton, United States of America

Corresponding author: Yuan Chen ( yuanchen@xidian.edu.cn )

© Yuan Chen, Qingkuan Dong, Yannan Li, Qiqi Lai, Zhedong Wang.
This is an open access article distributed under the terms of the Creative Commons Attribution License (CC BY-ND 4.0). This license allows reusers to copy and distribute the material in any medium or format in unadapted form only, and only so long as attribution is given to the creator. The license allows for commercial use.
Citation: Chen Y, Dong Q, Li Y, Lai Q, Wang Z (2019) Natural sd-RCCA Secure Public-key Encryptions from Hybrid Paradigms. JUCS - Journal of Universal Computer Science 25(3): 158-181. https://doi.org/10.3217/jucs-025-03-0158
Open Access
Abstract
The existence of natural public-key encryption (PKE) schemes satisfying secretly detectable replayable CCA (sd-RCCA) security is left as open. By introducing probabilistic message authentication codes (MACs) into popular KEM plus DEM paradigms, several instances of such schemes are presented in this paper. It is known that the encrypt-then-authenticate paradigm gives an RCCA secure DEM when the underlying MAC is regular (but not strong) secure, where forgeries for old messages might be possible. By further requiring that the validity of such forgeries can be verified only secretly, sd-RCCA secure DEMs is obtained. Combining such DEMs with CCA secure KEMs gives sd-RCCA secure hybrid PKEs. We first formalize the related notions and this paradigm, and also other variants of KEM plus DEM hybrid paradigm since MACs are commonly used in them. Then we show natural examples of desired probabilistic MACs under the standard DDH assumption, and find appropriate KEMs to match the message space for those MACs and then obtain natural instances of sd-RCCA secure hybrid PKEs.
Keywords
sd-RCCA security, probabilistic MAC, hybrid encryption, public-key encryption