{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,9]],"date-time":"2026-05-09T16:49:38Z","timestamp":1778345378744,"version":"3.51.4"},"reference-count":39,"publisher":"International Association for Cryptologic Research","issue":"1","license":[{"start":{"date-parts":[[2025,1,13]],"date-time":"2025-01-13T00:00:00Z","timestamp":1736726400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IACR CiC"],"accepted":{"date-parts":[[2025,3,11]]},"abstract":"<jats:p>  We present the first fully collusion resistant traceable functional encryption (TFE) scheme for identity-based inner product FE (IBIPFE) that directly traces user identities through an efficient tracing procedure. We name such a scheme as embedded identity TIBIPFE  (EI-TIBIPFE) where secret keys and ciphertexts are computed for vectors, and decryption recovers the inner product between the vectors given the key and ciphertext are associated with the same group identity. Additionally, a secret key corresponds to a user identity for the purpose of tracing. Suppose some of the users linked to a particular group team up and create a pirate decoder that is capable of decrypting the content of the group, then the tracing algorithm extracts the identities of the dishonest users' given black-box access to the decoder. Previously, such schemes were designed for usual public key encryptions. In this work, we construct a fully collusion resistant EI-TIBIPFE scheme from pairings in the standard model. The ciphertext size of our scheme grows sub-linearly with the number of users in the system. We achieve many-target security of tracing, namely the adversary is allowed to ask for multiple secret keys corresponding to many functions, which notably solves an open problem raised by Do, Phan, and Pointcheval [CT-RSA'2020]. <\/jats:p>","DOI":"10.62056\/av4fe0zn4","type":"journal-article","created":{"date-parts":[[2025,4,8]],"date-time":"2025-04-08T21:23:17Z","timestamp":1744147397000},"update-policy":"https:\/\/doi.org\/10.62056\/adfjwm02dj","source":"Crossref","is-referenced-by-count":1,"title":["Fully Collusion Resistant Traceable Identity-Based Inner Product Functional Encryption"],"prefix":"10.62056","volume":"2","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4013-6995","authenticated-orcid":false,"given":"Subhranil","family":"Dutta","sequence":"first","affiliation":[{"name":"University of St. Gallen","place":["Switzerland"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6278-0418","authenticated-orcid":false,"given":"Tapas","family":"Pal","sequence":"additional","affiliation":[{"name":"Karlsruhe Institute of Technology, KASTEL SRL","place":["Germany"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0797-7255","authenticated-orcid":false,"given":"Amit","family":"Singh","sequence":"additional","affiliation":[{"name":"Siksha `O' Anusandhan (Deemed to be) University","place":["India"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4015-1386","authenticated-orcid":false,"given":"Sourav","family":"Mukhopadhyay","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology Kharagpur","place":["India"]}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"48349","published-online":{"date-parts":[[2025,4,8]]},"reference":[{"key":"ref1:CFN94","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"257","DOI":"10.1007\/3-540-48658-5_25","article-title":"Tracing Traitors","volume":"839","author":"Benny Chor","year":"1994"},{"key":"ref2:BF99","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"338","DOI":"10.1007\/3-540-48405-1_22","article-title":"An Efficient Public Key Traitor Tracing Scheme","volume":"1666","author":"Dan Boneh","year":"1999"},{"key":"ref3:TT01","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1007\/3-540-44586-2_16","article-title":"A Public-Key Traitor Tracing Scheme with Revocation Using\n  Dynamic Shares","volume":"1992","author":"Wen-Guey Tzeng","year":"2001"},{"key":"ref4:SW98","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1137\/S0895480196304246","article-title":"Combinatorial Properties and Constructions of Traceability\n  Schemes and Frameproof Codes","volume":"11","author":"Douglas R. Stinson","year":"1998","journal-title":"SIAM J. Discret. Math."},{"key":"ref5:KD98","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"145","DOI":"10.1007\/BFb0054123","article-title":"Optimum Traitor Tracing and Asymmetric Schemes","volume":"1403","author":"Kaoru Kurosawa","year":"1998"},{"key":"ref6:KY02","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"450","DOI":"10.1007\/3-540-46035-7_30","article-title":"Traitor Tracing with Constant Transmission Rate","volume":"2332","author":"Aggelos Kiayias","year":"2002"},{"key":"ref7:CPP05","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"542","DOI":"10.1007\/11426639_32","article-title":"Public Traceability in Traitor Tracing Schemes","volume":"3494","author":"Herv\u00e9 Chabanne","year":"2005"},{"key":"ref8:ABPS17","doi-asserted-by":"publisher","first-page":"2277","DOI":"10.1145\/3133956.3134041","article-title":"Efficient Public Trace and Revoke from Standard Assumptions:\n  Extended Abstract","author":"Shweta Agrawal","year":"2017"},{"key":"ref9:FT01","doi-asserted-by":"publisher","first-page":"211","DOI":"10.1007\/s00145-001-0006-7","article-title":"Dynamic Traitor Tracing","volume":"14","author":"Amos Fiat","year":"2001","journal-title":"J. Cryptol."},{"key":"ref10:SSW01","doi-asserted-by":"publisher","first-page":"1042","DOI":"10.1109\/18.915661","article-title":"Combinatorial properties of frameproof and traceability\n  codes","volume":"47","author":"Jessica Staddon","year":"2001","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref11:BZ17","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"480","DOI":"10.1007\/978-3-662-44371-2_27","article-title":"Multiparty Key Exchange, Efficient Traitor Tracing, and More\n  from Indistinguishability Obfuscation","volume":"8616","author":"Dan Boneh","year":"2014"},{"key":"ref12:KY02a","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"450","DOI":"10.1007\/3-540-46035-7_30","article-title":"Traitor Tracing with Constant Transmission Rate","volume":"2332","author":"Aggelos Kiayias","year":"2002"},{"key":"ref13:KY02b","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"172","DOI":"10.1007\/3-540-45664-3_12","article-title":"Linear Code Implies Public-Key Traitor Tracing","volume":"2274","author":"Kaoru Kurosawa","year":"2002"},{"key":"ref14:LPSS17","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"315","DOI":"10.1007\/978-3-662-44371-2_18","article-title":"Hardness of k-LWE and Applications in Traitor Tracing","volume":"8616","author":"San Ling","year":"2014"},{"key":"ref15:ADMNPS07","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"361","DOI":"10.1007\/978-3-540-71677-8_24","article-title":"Identity-Based Traitor Tracing","volume":"4450","author":"Michel Abdalla","year":"2007"},{"key":"ref16:GMS12","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"609","DOI":"10.1007\/978-3-642-33167-1_35","article-title":"Identity-Based Traitor Tracing with Short Private Key and\n  Short Ciphertext","volume":"7459","author":"Fuchun Guo","year":"2012"},{"key":"ref17:PT11","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"204","DOI":"10.1007\/978-3-642-24316-5_15","article-title":"Identity-Based Trace and Revoke Schemes","volume":"6980","author":"Duong Hieu Phan","year":"2011"},{"key":"ref18:DPP20","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"564","DOI":"10.1007\/978-3-030-40186-3_24","article-title":"Traceable Inner Product Functional Encryption","volume":"12006","author":"Xuan Thanh Do","year":"2020"},{"key":"ref19:BSW11","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"253","DOI":"10.1007\/978-3-642-19571-6_16","article-title":"Functional Encryption: Definitions and Challenges","volume":"6597","author":"Dan Boneh","year":"2011"},{"key":"ref20:BSW06","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"573","DOI":"10.1007\/11761679_34","article-title":"Fully Collusion Resistant Traitor Tracing with Short\n  Ciphertexts and Private Keys","volume":"4004","author":"Dan Boneh","year":"2006"},{"key":"ref21:BW06","doi-asserted-by":"publisher","first-page":"211","DOI":"10.1145\/1180405.1180432","article-title":"A fully collusion resistant broadcast, trace, and revoke\n  system","author":"Dan Boneh","year":"2006"},{"key":"ref22:NWZ16","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"388","DOI":"10.1007\/978-3-662-49896-5_14","article-title":"Anonymous Traitor Tracing: How to Embed Arbitrary\n  Information in a Key","volume":"9666","author":"Ryo Nishimaki","year":"2016"},{"key":"ref23:GKW19","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"149","DOI":"10.1007\/978-3-030-36033-7_6","article-title":"New Approaches to Traitor Tracing with Embedded Identities","volume":"11892","author":"Rishab Goyal","year":"2019"},{"key":"ref24:LAWH22","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1007\/978-3-031-17140-6_13","article-title":"Generic Construction of Trace-and-Revoke Inner Product\n  Functional Encryption","volume":"13554","author":"Fucai Luo","year":"2022"},{"key":"ref25:ACGU20","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"467","DOI":"10.1007\/978-3-030-64840-4_16","article-title":"Inner-Product Functional Encryption with Fine-Grained Access\n  Control","volume":"12493","author":"Michel Abdalla","year":"2020"},{"key":"ref26:AGT21","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"224","DOI":"10.1007\/978-3-030-90453-1_8","article-title":"Multi-Party Functional Encryption","volume":"13043","author":"Shweta Agrawal","year":"2021"},{"key":"ref27:DP18","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"426","DOI":"10.1007\/978-3-030-21568-2_21","article-title":"Unbounded Inner-Product Functional Encryption with Succinct\n  Keys","volume":"11464","author":"Edouard Dufour Sans","year":"2019"},{"key":"ref28:Free10","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"44","DOI":"10.1007\/978-3-642-13190-5_3","article-title":"Converting Pairing-Based Cryptosystems from Composite-Order\n  Groups to Prime-Order Groups","volume":"6110","author":"David Mandell Freeman","year":"2010"},{"key":"ref29:DKW21","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"177","DOI":"10.1007\/978-3-030-77870-5_7","article-title":"Decentralized Multi-authority ABE for DNFs from LWE","volume":"12696","author":"Pratish Datta","year":"2021"},{"key":"ref30:GKRW18","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"467","DOI":"10.1007\/978-3-319-96884-1_16","article-title":"Risky Traitor Tracing and New Differential Privacy Negative\n  Results","volume":"10991","author":"Rishab Goyal","year":"2018"},{"key":"ref31:CVWWW18","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"341","DOI":"10.1007\/978-3-030-03810-6_13","article-title":"Traitor-Tracing from LWE Made Simple and Attribute-Based","volume":"11240","author":"Yilei Chen","year":"2018"},{"key":"ref32:Zha21","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1007\/978-3-030-84259-8_11","article-title":"White Box Traitor Tracing","volume":"12828","author":"Mark Zhandry","year":"2021"},{"key":"ref33:ABCP15","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"733","DOI":"10.1007\/978-3-662-46447-2_33","article-title":"Simple Functional Encryption Schemes for Inner Products","volume":"9020","author":"Michel Abdalla","year":"2015"},{"key":"ref34:ALS16","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"333","DOI":"10.1007\/978-3-662-53015-3_12","article-title":"Fully Secure Functional Encryption for Inner Products, from\n  Standard Assumptions","volume":"9816","author":"Shweta Agrawal","year":"2016"},{"key":"ref35:Waters05","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1007\/11426639_7","article-title":"Efficient Identity-Based Encryption Without Random Oracles","volume":"3494","author":"Brent Waters","year":"2005"},{"key":"ref36:BR09","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"407","DOI":"10.1007\/978-3-642-01001-9_24","article-title":"Simulation without the Artificial Abort: Simplified Proof\n  and Improved Concrete Security for Waters' IBE Scheme","volume":"5479","author":"Mihir Bellare","year":"2009"},{"key":"ref37:BBG05","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"440","DOI":"10.1007\/11426639_26","article-title":"Hierarchical Identity Based Encryption with Constant Size\n  Ciphertext","volume":"3494","author":"Dan Boneh","year":"2005"},{"key":"ref38:GKW19a","doi-asserted-by":"publisher","first-page":"660","DOI":"10.1145\/3188745.3188844","article-title":"Collusion resistant traitor tracing from learning with\n  errors","author":"Rishab Goyal","year":"2018"},{"key":"ref39:BB04","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"223","DOI":"10.1007\/978-3-540-24676-3_14","article-title":"Efficient Selective-ID Secure Identity-Based Encryption\n  Without Random Oracles","volume":"3027","author":"Dan Boneh","year":"2004"}],"container-title":["IACR Communications in Cryptology"],"original-title":[],"language":"en","deposited":{"date-parts":[[2025,4,8]],"date-time":"2025-04-08T21:25:03Z","timestamp":1744147503000},"score":1,"resource":{"primary":{"URL":"https:\/\/cic.iacr.org\/p\/2\/1\/28"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,8]]},"references-count":39,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,4,8]]}},"URL":"https:\/\/doi.org\/10.62056\/av4fe0zn4","archive":["Internet Archive","Internet Archive"],"relation":{},"ISSN":["3006-5496"],"issn-type":[{"value":"3006-5496","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,4,8]]},"assertion":[{"value":"2025-01-13","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-03-11","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"cc2-1-48"}}