Key-Policy Attribute-Based Encryption Based on SM9

• Published in: Journal of computer science and technology Vol. 40; no. 1; pp. 267 - 282
• Main Authors: Liu, Xiao-Hong, Huang, Xin-Yi, Wu, Wei, Ning, Jian-Ting
• Format: Journal Article
• Language: English
• Published: Singapore Springer Nature Singapore 01.01.2025; Springer Nature B.V
• Subjects: Access control; Algorithms; Artificial Intelligence; Cloud computing; Computer Science; Computing costs; Cryptography; Data Structures and Information Theory; Distributed processing; Encryption; Information systems; Information Systems Applications (incl.Internet); Regular Paper; Software Engineering; Theory of Computation; key-policy attribute-based encryption; selective-set model; large universe; SM9
• ISSN: 1000-9000; 1860-4749
• DOI: 10.1007/s11390-024-3726-z

Attribute-based encryption (ABE) is a type of encryption derived from identity-based encryption, implementing access control over encrypted data based on attributes rather than on specific identities. SM9 is the Chinese national standard for identity-based cryptography. This paper presents two novel key-policy attribute-based encryption (KP-ABE) designs based on SM9. The first scheme operates in a small attribute universe, while the second scheme caters to a large universe where the size of public parameters is only proportional to the maximum number of attributes used for encryption. Both schemes have a similar private-key/ciphertext structure to the original SM9 identity-based encryption algorithm, enabling effective integration into information systems built on SM9. Further, both schemes are selectively secure under the ( f , g )-GDDHE assumption. Extensive experiments show that both schemes are comparable to other classical KP-ABE schemes, in terms of the communication and computational costs. We believe the proposed schemes will expedite the implementation of SM9 in distributed computing systems such as cloud computing and blockchain.