Abstract :
[en] In this work we put forth the notion of a Controllable Homomorphic Encryption scheme (CHES), a new primitive that includes features of both FHEs and FunctEs. In a CHES it is possible (similarly to a FHE) to homomorphically evaluate a ciphertext Ct = Enc(m) and a circuit C therefore obtaining Enc(C(m)) but only if (similarly to a FunctE) a token for C has been received from the owner of the secret key.
We discuss difficulties in constructing a CHES and then show a construction based on any FunctE.
As a byproduct our CHES also represents a FunctE supporting the re-encryption functionality and in that respect improves existing solutions.
Scopus citations®
without self-citations
2