An IND-CCA2 secure post-quantum encryption scheme and a secure cloud storage use case

Peng Zeng,Siyuan Chen,Kim-Kwang Raymond Choo

doi:10.1186/s13673-019-0193-6

Abstract

Code-based public key encryption (PKE) is a popular choice to achieve post-quantum security, partly due to its capability to achieve fast encryption/decryption. However, code-based PKE has larger ciphertext and public key sizes in comparison to conventional PKE schemes (e.g., those based on RSA). In 2018, Lau and Tan proposed a new rank metric code-based PKE scheme, which has smaller public key and ciphertext sizes compared to other code-based PKE schemes. They also proved that their scheme achieves IND-CPA security, assuming the intractability of the decisional rank syndrome decoding problem. It is known that IND-CCA2 security is the strongest and most popular security assurance for PKE schemes. Therefore, in this paper, we obtain a new code-based PKE scheme from Lau and Tan’s scheme, in order to inherit the underlying small public key and ciphertext sizes. However, our new scheme is shown to achieve IND-CCA2 security, instead of the weaker IND-CPA security. Specifically, the respective public key size and ciphertext size in our new scheme are 15.06 KB and 1.37 KB under 141-bit security level, and 16.76 KB and 1.76 KB under 154-bit security level. We then present a use case for the proposed scheme, that is for secure cloud storage.

Highlights

With rapid advances in Internet and information and communication technologies (ICT; e.g., computation devices, speed of communication and device processors), our society is becoming increasingly reliant on technologies
Security proof we prove the correctness and IND-CCA2 security of our code-based public key encryption (PKE) scheme presented in the preceding section
Compared to Loidreau’s scheme [17], which is a recently proposed PKE scheme based on rank metric codes, our PKE scheme has a significant advantage in terms of public key size and ciphertext size

Summary

Introduction

With rapid advances in Internet and information and communication technologies (ICT; e.g., computation devices, speed of communication and device processors), our society is becoming increasingly reliant on technologies. Definition 6 (IND-CCA2 security) For any two-stage (find stage and guess stage) adversary A = (A1, A2) against a PKE scheme E = (Setup, KGen, Enc, Dec) , the INDCCA2 security is modeled as an experiment ExpIAN,DP-KCECA2( ) with respect to a security parameter .

Results

Conclusion