International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: Self-Generated-Certificate Public Key Cryptosystem

Joseph K. Liu
Man Ho Au
Search ePrint
Search Google
Abstract: Certificateless Public Key Cryptography (CL-PKC) enjoys a number of features of Identity-Based Cryptography (IBC) while without having the problem of key escrow. However, it \textit{does} suffer to an attack where the adversary, Carol, replaces Alice's public key by someone's public key so that Bob, who wants to send an encrypted message to Alice, uses Alice's identity and other's public key as the inputs to the encryption function. As a result, Alice cannot decrypt the message while Bob is unaware of this. We call it \textit{Denial-of-Decryption (DoD) Attack} as its nature is similar to the well known Denial-of-Service (DoS) Attack. Based on CL-PKC, we propose a new paradigm called \textit{Self-Generated-Certificate Public Key Cryptography (SGC-PKC)} that captures the DoD Attack. We also provide a generic construction of a self-generated-certificate public key encryption scheme in the standard model. In addition, we further propose a certificateless signature and a certificateless encryption scheme with concrete implementation. They are all provably secure in the standard model, which are the first in the literature regardless of the generic constructions by Yum and Lee which may contain security weaknesses as pointed out by others. We believe these concrete implementations are of independent interest.
  title={Self-Generated-Certificate Public Key Cryptosystem},
  booktitle={IACR Eprint archive},
  keywords={public-key cryptography /},
  note={ 13448 received 5 Jun 2006, last revised 8 Jun 2006, withdrawn 27 Oct 2006},
  author={Joseph K. Liu and Man Ho Au},