Succinct LWE ⇒ ABE

Standard model · Wee25

Statement

Succinct LWE implies key-policy and ciphertext-policy ABE for depth-$d$ circuits over $\ell$-bit inputs with ciphertext, secret-key and public-key size $O(1)$, and laconic function evaluation with ciphertext size $\ell +O(1)$ and CRS and digest size $O(1)$, where $O(\cdot )$ hides $\mathrm{poly}(d,\lambda )$ factors — Wee25.

Notes

• $\ell$-succinct LWE was introduced, and shown to follow from evasive LWE, in Wee24.