DLIN ⇒ IPPE

Free reduction · standard model · OT12 · security loss: polynomial: the dual-system hybrid changes the secret keys one at a time, a factor linear in the number of key queries

Statement

If DLIN holds in prime-order bilinear groups, there is an inner-product predicate encryption scheme that is adaptively secure and fully attribute-hiding in the sense of KSW08, in the standard model — OT12.

Notes

• The first IPPE scheme, KSW08, works in composite-order bilinear groups and is only selectively attribute-hiding, under two new assumptions that KSW08 justify in the generic group model; it is not a DLIN result.