论文标题

选择太多:开发人员对安倍图库的调查

Too Many Options: A Survey of ABE Libraries for Developers

论文作者

Mosteiro-Sanchez, Aintzane, Barcelo, Marc, Astorga, Jasone, Urbieta, Aitor

论文摘要

基于属性的加密(ABE)包括一组一对多的加密方案,这些方案允许通过将数据与访问策略和属性关联来对数据进行加密和解密。因此,这是一个不对称的加密方案,其计算要求限制了其在IoT设备中的部署。每种类型中有不同类型的ABE和许多方案。但是,在ABE的默认库上尚无共识,而存在的计划则实现了不同的计划。因此,开发人员通过为其项目选择合适的图书馆来面对平衡效率和安全性的挑战。本文研究了11个安倍晋三库,分析其主要特征,所使用的数学库以及他们提供的安倍座计划。本文还对四个库进行了实验分析,这些库仍维护并确定了它们实施的一些不安全的安倍计划。在此实验分析中,我们实施了这些图书馆提供的计划,测量了其在具有不同功能的架构上的执行时间,即ARMV6和ARMV8。这些实验为开发人员提供了必要的信息,以根据客观且定义明确的标准选择最合适的项目库。

Attribute-based encryption (ABE) comprises a set of one-to-many encryption schemes that allow the encryption and decryption of data by associating it with access policies and attributes. Therefore, it is an asymmetric encryption scheme, and its computational requirements limit its deployment in IoT devices. There are different types of ABE and many schemes within each type. However, there is no consensus on the default library for ABE, and those that exist implement different schemes. Developers, therefore, face the challenge of balancing efficiency and security by choosing the suitable library for their projects. This paper studies eleven ABE libraries, analyzing their main features, the mathematical libraries used, and the ABE schemes they provide. The paper also presents an experimental analysis of the four libraries which are still maintained and identifies some of the insecure ABE schemes they implement. In this experimental analysis, we implement the schemes offered by these libraries, measuring their execution times on architectures with different capabilities, i.e., ARMv6 and ARMv8. The experiments provide developers with the necessary information to choose the most suitable library for their projects, according to objective and well-defined criteria.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源