Method of encryption based on identification using Pedersen commitment and method of decryption corresponding the same
The present invention is an encryption method based on identification using a Pedersen commitment and a decryption method corresponding to the same. An encryption method of a message based on identification, performed by at least one processor, includes steps of receiving a public parameter and a public key, randomly determining an encryption constant, parsing a plurality of parameters from the public parameter, calculating a first cypher text and a second cypher text by using the plurality of parameters, the encryption constant, and the message, parsing an ID value including a plurality of bits from the public key, calculating a third cypher text by using the ID value, and outputting the first cypher text, the second cypher text, and the third cypher text. At least one of the first cypher text, the second cypher text, and the third cypher text has a Pedersen commitment format.
1 . An encryption method of a message based on identification performed by at least one processor, the encryption method comprising:
receiving a public parameter and a public key;
randomly determining an encryption constant;
parsing a plurality of parameters from the public parameter;
obtaining a first cypher text by using a first commit value and a second commit value, the encryption constant, and the message;
obtaining a second cypher text by using the plurality of parameters and the encryption constant;
parsing an identification (ID) value including a plurality of bits from the public key;
obtaining a third cypher text by using the ID value; and
outputting the first cypher text, the second cypher text, and the third cypher text,
wherein at least one of the first cypher text, the second cypher text, and the third cypher text has a Pedersen commitment format,
wherein the obtaining the third cypher text comprises:
parsing a third parameter and a parameter vector from the public parameter;
obtaining an index set including indexes corresponding to a first bit value among a plurality of bits of the ID value; and
obtaining the third cypher text by using elements corresponding to the index set among elements included in the parameter vector and the third parameter,
wherein when the third parameter is ū, the parameter vector is U, the index set is S, and the encryption constant is t, the third cypher text ct 3 is determined by the following equation
ct
3
=
(
u
_
·
∑
i
∈
S
U
i
)
t
.
2 . The encryption method of claim 1 , wherein the obtaining the first cypher text comprises determining, among the plurality of parameters, a value obtained by multiplying a value of the first commit value exponentiated by the message and a value of the second commit value exponentiated by the encryption constant as the first cypher text.
3 . The encryption method of claim 2 , wherein when the first commit value is g 1 , the second commit value is g 2 , the message is m, and the encryption constant is t, the first cypher text ct 1 is determined by the following equation
ct
1
=
g
1
m
·
g
2
t
.
4 . The encryption method of claim 1 , wherein the obtaining the second cypher text comprises determining, among the plurality of parameters, a value of a first parameter of the plurality of parameters exponentiated by the encryption constant as the second cypher text.
5 . The encryption method of claim 4 , wherein when the first parameter is g and the encryption constant is t, the second cypher text ct 2 is determined by the following equation.
ct 2 =g t