openabe icon indicating copy to clipboard operation
openabe copied to clipboard

Is it possible to check if key can decrypt ciphertext?

Open touatily opened this issue 6 years ago • 3 comments

I would like to know there is it possible to check if a key can decrypt ciphertext without trying to decrypt it.

I know that, trying to decrypt a ciphertext with unauthorized key generates an error. So we can assume that the policy is not satisfied. But I need more proper way to do it.

touatily avatar Apr 16 '20 11:04 touatily

I don't believe that functionality is explicitly given, but should not be very difficult to tweak on.

On 4/16/20 6:29 AM, Lyes Touati wrote:

I would like to know there is it possible to check if a key can decrypt ciphertext without trying to decrypt it.

I know that, trying to decrypt a ciphertext with unauthorized key generates an error. So we can assume that the policy is not satisfied. But I need more proper way to do it.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/zeutro/openabe/issues/34, or unsubscribe https://github.com/notifications/unsubscribe-auth/AB4ZTT7EDG7KHNINFDKZ7ZDRM3TZVANCNFSM4MJRL42A.

brent-zeutro avatar Apr 16 '20 19:04 brent-zeutro

I think it is an interesting functionnality. Because we should always test first if our key is elligible to decrypt or not.

touatily avatar Apr 16 '20 20:04 touatily

Now I'm curious, in an ABE system what is the status of the security of the attributes and policies? Can they be recovered from the key or cypher text? If they can't are there any security guarantees about not being able to recover them? ie. Can I include an attribute on a key that the key owner is unaware of?

zacharywhitley avatar Oct 07 '22 13:10 zacharywhitley