Attribute-based encryption: Difference between revisions

Revision as of 21:44, 15 June 2023

Revision as of 21:45, 15 June 2023

Line 1:

''' is a generalisation of [[public-key encryption]] which enables fine grained access control of encrypted data using [[Authorization | authorisation policies]]. The [[secret key]] of a user and the ciphertext are dependent upon attributes (e.g. their email address, the country in which they live, or the kind of subscription they have). In such t is possible only if the set of attributes of the user key matches the attributes of the ciphertext.<ref>{{citecollusion-resistance: webAn |title=Whatadversary isthat Attribute-Basedholds Encryptionmultiple |work=Cryptographykeys Stackshould Exchangeonly |url=https://crypto.stackexchange.com/a/17894be |date=2014able }}</ref>to access data if at least one individual key grants access.

A crucial security aspect of attribute-based encryption is collusion-resistance: An adversary that holds multiple keys should only be able to access data if at least one individual key grants access.

==Description==