NM-CPA secure encryption with proofs of plaintext knowledge

This paper presents a construction for NM-CPA ciphertexts which prove plaintext knowledge. Applications include ballot secrecy proofs in schemes such as Helios.

Ben Smyth, Yoshikazu Hanatani & Hirofumi Muratani (2015) NM-CPA secure encryption with proofs of plaintext knowledge. In IWSEC'15: 10th International Workshop on Security (LNCS), Springer.

Abstract

NM-CPA secure asymmetric encryption schemes which prove plaintext knowledge are sufficient for secrecy and verifiability in some domains, for example, ballot secrecy and end-to-end verifiability in electronic voting. In these domains, some applications derive encryption schemes by coupling malleable IND-CPA secure ciphertexts with proofs of plaintext knowledge, without evidence that the sufficient condition is satisfied nor an independent security proof. Consequently, it is unknown whether these applications satisfy the desired secrecy and verifiability properties. In this paper, we propose a generic construction for such a coupling and prove that our construction produces NM-CPA secure encryption schemes which prove plaintext knowledge. Accordingly, we facilitate the development of applications satisfying their secrecy and verifiability objectives and, moreover, we make progress towards security proofs for existing applications.

$ curl -s https://publications.bensmyth.com/files/Smyth15-ciphertext-plus-proof-of-knowledge-is-NM-CPA.bib | cat
@inproceedings{Smyth15-ciphertext-plus-proof-of-knowledge-is-NM-CPA,
  title = {{NM-CPA secure encryption with proofs of plaintext knowledge}},
  year = {2015}, author = {Ben Smyth and Yoshikazu Hanatani and Hirofumi Muratani}, doi = {10.1007/978-3-319-22425-1\_8},
  url = {./},
  url-bib = {./files/ciphertext-plus-proof-of-knowledge-is-NM-CPA.bib},
  url-yaml = {./files/ciphertext-plus-proof-of-knowledge-is-NM-CPA.yml}
}