International Association for Cryptologic Research

International Association
for Cryptologic Research


Hierarchical Integrated Signature and Encryption

Yu Chen , Shandong University
Qiang Tang , The University of Sydney
Yuyu Wang , University of Electronic Science and Technology of China
DOI: 10.1007/978-3-030-92075-3_18
Search ePrint
Search Google
Presentation: Slides
Conference: ASIACRYPT 2021
Abstract: In this work, we introduce the notion of hierarchical integrated signature and encryption (HISE), wherein a single public key is used for both signature and encryption, and one can derive a secret key used only for decryption from the signing key, which enables secure delegation of decryption capability. HISE enjoys the benefit of key reuse, and admits individual key escrow. We present two generic constructions of HISE. One is from (constrained) identity-based encryption. The other is from uniform one-way function, public-key encryption, and general-purpose public-coin zero-knowledge proof of knowledge. To further attain global key escrow, we take a little detour to revisit global escrow PKE, an object both of independent interest and with many applications. We formalize the syntax and security model of global escrow PKE, and provide two generic constructions. The first embodies a generic approach to compile any PKE into one with global escrow property. The second establishes a connection between three-party non-interactive key exchange and global escrow PKE. Combining the results developed above, we obtain HISE schemes that support both individual and global key escrow. We instantiate our generic constructions of (global escrow) HISE and implement all the resulting concrete schemes for 128-bit security. Our schemes have performance that is comparable to the best Cartesian product combined public-key scheme, and exhibit advantages in terms of richer functionality and public key reuse. As a byproduct, we obtain a new global escrow PKE scheme that outperforms the best prior work in speed by several orders of magnitude, which might be of independent interest.
Video from ASIACRYPT 2021
  title={Hierarchical Integrated Signature and Encryption},
  author={Yu Chen and Qiang Tang and Yuyu Wang},