Cryptographic system, re-encryption key generation device, re-encryption device, cryptographic method, and cryptographic program

摘要

It is an object to implement a functional proxy re-encryption scheme. A decryption device 300 transmits to a re-encryption device 400 a decryption key k*rk which is generated by converting, using conversion information W1, a decryption key k* in which is set one of attribute information x and attribute information v corresponding to each other, and encrypted conversion information ψrk which is generated by encrypting the conversion information W1 with one of attribute information x′ and attribute information v′ corresponding to each other being set. The re-encryption device 400 generates a re-encrypted ciphertext CT, constituted by a ciphertext crenc which is generated by setting at least one of additional information H and additional information Θ corresponding to each other in a ciphertext cenc in which is set the other one of the attribute information x and the attribute information v, and a decryption key k*renc which is generated by setting at least the other one of the additional information H and the additional information Θ in the decryption key k*rk.

主权项

1. A hardware-including cryptographic system that implements a proxy re-encryption function in a cryptographic scheme according to which when two pieces of information correspond to each other, a ciphertext which is set to one of the two pieces of information which is decrypted with a decryption key which is set to the other one of the two pieces of information, the hardware-including cryptographic system comprising a re-encryption key generation hardware-including device and a re-encryption hardware-including device,
wherein the re-encryption key generation hardware-including device includes a decryption key k*rk generation part that generates a decryption key k*rk by converting, using conversion information W1, a decryption key k* which is set to one of attribute information x and attribute information v corresponding to each other; a conversion information W1 encryption part that generates encrypted conversion information ψrk by encrypting the conversion information W1 with one of attribute information x′ and attribute information v′ corresponding to each other being set; and a re-encryption key transmission part that transmits to the re-encryption hardware-including device the decryption key k*rk and the encrypted conversion information ψrk, as a re-encryption key rk; and wherein the re-encryption hardware-including device includes a ciphertext receiving part that receives a ciphertext cenc which is set to the other one of the attribute information x and the attribute information v; a ciphertext crenc generation part that generates a ciphertext crenc by setting at least one of additional information H and additional information Θ corresponding to each other in the ciphertext cenc received by the ciphertext receiving part; a decryption key k*renc generation part that generates a decryption key k*renc by setting at least the other one of the additional information H and the additional information Θ in the decryption key k*rk included in the re-encryption key rk; and a re-encrypted ciphertext transmission part that transmits the ciphertext crenc, the decryption key k*renc, and the encrypted conversion information ψrk, as a re-encrypted ciphertext CT.