Quantum Identity-Based Encryption from the Learning with Errors Problem

• Published in: Cryptography Vol. 6; no. 1; p. 9
• Main Authors: Gao, Wenhua, Yang, Li, Zhang, Daode, Liu, Xia
• Format: Journal Article
• Language: English
• Published: Basel MDPI AG 01.03.2022
• Subjects: Addition & subtraction; Algorithms; Asymmetry; Circuits; Cryptography; Eavesdropping; Encryption; Errors; forward secrecy; Gates; Learning; LWE (learning with errors); Network security; Protocol; Public Key Infrastructure; quantum circuits; Quantum encryption; quantum IBE (identity-based encryption); Qubits (quantum computing); Secrecy aspects; Security
• ISSN: 2410-387X; 2410-387X
• DOI: 10.3390/cryptography6010009

To prevent eavesdropping and tampering, network security protocols take advantage of asymmetric ciphers to establish session-specific shared keys with which further communication is encrypted using symmetric ciphers. Commonly used asymmetric algorithms include public key encryption, key exchange, and identity-based encryption (IBE). However, network security protocols based on classic identity-based encryption schemes do not have perfect forward secrecy. To solve this problem, we construct the first quantum IBE (QIBE) scheme based on the learning with errors (LWE) problem, which is also the first cryptographic scheme that applies the LWE problem to quantum encryption. We prove that our scheme is fully secure under the random oracle model and highlight the following advantages: (1) Network security protocols with our QIBE scheme provide perfect forward secrecy. The ciphertext is transmitted in the form of a quantum state unknown to the adversary and cannot be copied and stored. Thus, in network security protocols based on QIBE construction, the adversary does not have any previous quantum ciphertext to decrypt for obtaining the previous session key, even if the private identity key is threatened. (2) Classic key generation centre (KGC) systems can still be used in the QIBE scheme to generate and distribute private identity keys, reducing the cost when implementing this scheme. The classic KGC systems can be used because the master public and secret keys of our scheme are both in the form of classic bits. Finally, we present quantum circuits to implement this QIBE scheme and analyse its required quantum resources for given numbers of qubits, Hadamard gates, phase gates, T gates, and CNOT (controlled-NOT) gates. One of our main findings is that the quantum resources required by our scheme increase linearly with the number of plaintext bits to be encrypted.