Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces a novel lattice-based forward-secure identity-based encryption (FS-IBE) scheme designed specifically for the resource-constrained environment of the Internet of Things (IoT). By leveraging the ring learning with errors (RLWE) assumption, the proposed scheme significantly reduces the size of public keys, secret keys, and ciphertexts while ensuring post-quantum security. The implementation of trapdoor delegation with a minimal-cover mechanism enables efficient key updates across epochs, making it a practical solution for enhancing security in IoT architectures.
Achieving post-quantum security without sacrificing efficiency, this new FS-IBE scheme dramatically reduces key and ciphertext sizes, making it ideal for IoT applications.
The rapid expansion of the Internet of Things (IoT) has led to an unprecedented scale of data exchange across heterogeneous and resource-constrained devices. Ensuring confidentiality and secure key management in such environments is challenging. Traditional public-key infrastructures require heavy certificate-handling overhead. Identity-Based Encryption (IBE) offers a lightweight alternative by deriving public keys directly from device identities, making it attractive for IoT deployments. However, IoT devices are highly vulnerable to side-channel and key-extraction attacks, motivating the need for Forward-Secure IBE(FS-IBE), where the compromise of a current secret key does not threaten past communications. Existing FS-IBE constructions based on classical hardness assumptions are not secure in the era of post-quantum, while the lattice-based (LWE-based) forward-secure scheme suffer from large key and ciphertext sizes, limiting their suitability for constrained IoT systems. Here, we propose a new lattice-based fs-IBE scheme in the ring setting, relying on the RLWE assumption to achieve post-quantum security and significant efficiency gains. Our design uses trapdoor delegation with a minimal-cover mechanism over a binary tree. It results in compact public parameters and efficient per-epoch key updates. Compared to prior LWE-based constructions, our scheme reduces public key, secret key, and ciphertext sizes, and thus, making it better suited for practical IoT environments.