Improved Proxy Re-Encryption Schemes with Applications to Secure Distributed Storage

In 1998, Blaze, Bleumer, and Strauss proposed an application called atomic proxy re-encryption, in which a semi-trusted proxy converts a ciphertext for Alice into a ciphertext for Bob without seeing the underlying plaintext. We predict that fast and secure re-encryption will become increasingly popular as a method for managing encrypted file systems. Although efficiently computable, the wide-spread adoption of BBS re-encryption has been hindered by considerable security risks. Following recent work of Ivan and Dodis, we present new re-encryption schemes that realize a stronger notion of security and we demonstrate the usefulness of proxy reencryption as a method of adding access control to the SFS read-only file system. Performance measurements of our experimental file system demonstrate that proxy re-encryption can work effectively in practice.

• Type: Conference
• Year: 2005
• Where: NDSS
• Authors: Giuseppe Ateniese, Kevin Fu, Matthew Green, Susan Hohenberger
• Keywords: Atomic Proxy Re-encryption, Computer Networks, NDSS 2005, Proxy Re-encryption, file System