论文标题
使用安全密钥租赁的功能加密
Functional Encryption with Secure Key Leasing
论文作者
论文摘要
安全软件租赁是一种量子加密原始性，使我们能够通过将其编码为量子状态将软件租赁给用户。安全软件租赁具有验证返回软件是否有效的机制。安全性概念可以保证，一旦用户以有效的形式返回软件，用户将不再使用该软件。 在这项工作中，我们介绍了Secure-Key功能加密（SKFE）的概念，并使用安全的密钥租赁，其中可以从安全软件租赁的意义上牢固地租赁解密密钥。我们还将其实例化使用标准的加密假设。更具体地说，我们的贡献如下。 - 我们使用安全密钥租赁定义了SKFE的语法和安全定义。 - 我们在不使用其他假设的情况下通过安全键租赁实现了从标准SKFE到SKFE的转变。特别是，我们根据量子后的单向函数获得了P/Poly的有限的抗勾结SKFE，因为我们可以使用假设实例化p/poly的有限限制串谋SKFE。 一些以前的安全软件租赁方案仅捕获以诚实评估算法（在合法平台上）运行的海盗软件。但是，我们的安全钥匙租赁概念捕获了任意攻击策略，并且没有这种限制。 我们还介绍了单次分类器FE（SDFE）的概念，其中每个功能解密密钥均受拷贝性保护。由于拷贝保护比安全软件租赁更强大，因此可以将此概念视为具有安全密钥租赁的强度比FE更强。更具体地： - 我们定义了SDFE的语法和安全定义。 - 我们通过错误问题实现了Quantum无法区分的混淆和量子硬度的综合单分级PKFE，以误解了错误问题。
Secure software leasing is a quantum cryptographic primitive that enables us to lease software to a user by encoding it into a quantum state. Secure software leasing has a mechanism that verifies whether a returned software is valid or not. The security notion guarantees that once a user returns a software in a valid form, the user no longer uses the software. In this work, we introduce the notion of secret-key functional encryption (SKFE) with secure key leasing, where a decryption key can be securely leased in the sense of secure software leasing. We also instantiate it with standard cryptographic assumptions. More specifically, our contribution is as follows. - We define the syntax and security definitions for SKFE with secure key leasing. - We achieve a transformation from standard SKFE into SKFE with secure key leasing without using additional assumptions. Especially, we obtain bounded collusion-resistant SKFE for P/poly with secure key leasing based on post-quantum one-way functions since we can instantiate bounded collusion-resistant SKFE for P/poly with the assumption. Some previous secure software leasing schemes capture only pirate software that runs on an honest evaluation algorithm (on a legitimate platform). However, our secure key leasing notion captures arbitrary attack strategies and does not have such a limitation. We also introduce the notion of single-decryptor FE (SDFE), where each functional decryption key is copy-protected. Since copy-protection is a stronger primitive than secure software leasing, this notion can be seen as a stronger cryptographic primitive than FE with secure key leasing. More specifically: - We define the syntax and security definitions for SDFE. - We achieve collusion-resistant single-decryptor PKFE for P/poly from post-quantum indistinguishability obfuscation and quantum hardness of the learning with errors problem.
