Reference : On the Insecurity of a Method for Providing Secure and Private Fine-Grained Access to...
Scientific congresses, symposiums and conference proceedings : Paper published in a journal
Engineering, computing & technology : Computer science
http://hdl.handle.net/10993/29285
On the Insecurity of a Method for Providing Secure and Private Fine-Grained Access to Outsourced Data
English
Rial, Alfredo mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
Dec-2016
Abstract book of 2016 IEEE 8th International Conference on Cloud Computing Technology and Science (CloudCom)
Yes
International
8th IEEE International Conference on Cloud Computing Technology and Science
from 12-12-2016 to 15-12-2016
[en] Attribute-Based Encryption ; Cryptanalysis ; Access Control
[en] The protection of sensitive data stored in the cloud is paramount. Among the techniques proposed to provide protection, attribute-based access control, which frequently uses ciphertext-policy attribute-based encryption (CPABE), has received a lot of attention in the last years. Recently, Jahan et al.~(IEEE 40th Conference on Local Computer Networks, 2015) propose a scheme based on CPABE where users have reading and writing access to the outsourced data. We analyze the scheme by Jahan et al.\ and we show that it has several security vulnerabilities. For instance, the cloud server can get information about encrypted messages by using a stored ciphertext and an update of that ciphertext. As another example, users with writing access are able to decrypt all the messages regardless of their attributes. We discuss the security claims made by Jahan et al.\ and point out the reasons why they do not hold. We also explain that existing schemes can already provide the advantages claimed by Jahan et al.
http://hdl.handle.net/10993/29285

File(s) associated to this reference

Fulltext file(s):

FileCommentaryVersionSizeAccess
Open access
main.pdfAuthor postprint262.23 kBView/Open

Bookmark and Share SFX Query

All documents in ORBilu are protected by a user license.