Evasive LWE + Tensor LWE ⇒ ABE

Standard model · Wee22

Statement

Evasive LWE together with tensor LWE (introduced in the same work) and LWE yields ciphertext-policy ABE for circuits of a-priori bounded polynomial depth, with parameter sizes independent of the circuit size; security is very selective (the adversary fixes the challenge policy and all key queries in advance) — Wee22.