Circular-SecureEncryptionfromDecisionDiffie-Hellman.pptVIP

Circular-Secure Encryption from Decision Diffie-Hellman Dan Boneh Shai Halevi Mike Hamburg Rafail Ostrovsky Key Dependent Messages Message may depend on key Encrypted swap Encrypted backups Security in this setting does not follow from semantic security Trivial, pathological counterexamples Or… Secure Self-Encryption [BRS’02] Insecure Self-Encryption [HK’07] KDM in practice Collaboration: Circular Encryption [CL’01] A user has n credentials signed by CA: User should not “lend” any of his credentials to a friend Solution [CL’01] : Clique Security (C,n)-KDM security [BRS’02] Is El