Integrated Encryption Scheme

Integrated Encryption Scheme (IES) is a hybrid encryption scheme which provides semantic security against an adversary who is allowed to use chosen-plaintext and chosen-ciphertext attacks. The security of the scheme is based on the Diffie–Hellman problem. Two incarnations of the IES are standardized: Discrete Logarithm Integrated Encryption Scheme (DLIES) and Elliptic Curve Integrated Encryption Scheme (ECIES), which is also known as the Elliptic Curve Augmented Encryption Scheme or simply the Elliptic Curve Encryption Scheme. These two incarnations are identical up to the change of an underlying group and so to be concrete we concentrate on the latter.

Information required

To send an encrypted message to Bob using ECIES, Alice needs the following information:

cryptographic suite to be used, including a key derivation function (e.g., ANSI-X9.63-KDF with SHA-1 option), a message authentication code (e.g., HMAC-SHA-1-160 with 160-bit keys or HMAC-SHA-1-80 with 80-bit keys) and a symmetric encryption scheme (e.g., TDEA in CBC mode or XOR encryption scheme)—noted $E$ ;
elliptic curve domain parameters: $(p,a,b,G,n,h)$ for a curve over a prime field or $(m,f(x),a,b,G,n,h)$ for a curve over a binary field;
Bob's public key: $K_{B}$ (Bob generates it as follows: $K_{B}=k_{B}G$ , where $k_{B}$ is the private key he chooses at random: $k_{B}\in [1,n-1]$ );
optional shared information: $S_{1}$ and $S_{2}$ .
$O$ denotes point at infinity

Encryption

To encrypt a message $m$ Alice does the following:

generates a random number $r\in [1,n-1]$ and calculates $R=rG$ ;
derives a shared secret: $S=P_{x}$ , where $P=(P_{x},P_{y})=rK_{B}$ (and $P\neq O$ );
uses KDF to derive a symmetric encryption and a MAC keys: $k_{E}\|k_{M}={\textrm {KDF}}(S\|S_{1})$ ;
encrypts the message: $c=E(k_{E};m)$ ;
computes the tag of encrypted message and $S_{2}$ : $d={\textrm {MAC}}(k_{M};c\|S_{2})$ ;
outputs $R\|c\|d$ .

Decryption

To decrypt the ciphertext $R\|c\|d$ Bob does the following:

derives the shared secret: $S=P_{x}$ , where $P=(P_{x},P_{y})=k_{B}R$ (it is the same as the one Alice derived because $P=k_{B}R=k_{B}rG=rk_{B}G=rK_{B}$ ), or outputs failed if $P=O$ ;
derives keys the same way as Alice did: $k_{E}\|k_{M}={\textrm {KDF}}(S\|S_{1})$ ;
uses MAC to check the tag and outputs failed if $d\neq {\textrm {MAC}}(k_{M};c\|S_{2})$ ;
uses symmetric encryption scheme to decrypt the message $m=E^{{-1}}(k_{E};c)$ .

References

Victor Shoup, A proposal for an ISO standard for public key encryption, Version 2.1, December 20, 2001.
Certicom Research, Standards for efficient cryptography, SEC 1: Elliptic Curve Cryptography, Version 2.0, May 21, 2009.
Gayoso Martínez, Hernández Encinas, Sánchez Ávila: A Survey of the Elliptic Curve Integrated Encryption Scheme, Journal of Computer Science and Engineering, 2, 2 (2010), 7-13.
Ladar Levison: Code for using ECIES to protect data (ECC + AES + SHA), openssl-devel mailing list, August 06, 2010

Public-key cryptography

Algorithms

Integer Factorization	Benaloh Blum–Goldwasser Cayley–Purser Damgård–Jurik GMR Goldwasser–Micali Paillier Rabin RSA Okamoto–Uchiyama Schmidt–Samoa

Discrete logarithm	Cramer–Shoup DH DSA ECDH ECDSA EdDSA EKE ElGamal signature scheme MQV Schnorr SPEKE SRP STS

Others	AE CEILIDH EPOC HFE IES Lamport McEliece Merkle–Hellman Naccache–Stern Naccache–Stern knapsack cryptosystem NTRUEncrypt NTRUSign Three-pass protocol XTR

Theory

Standardization

Topics

Cryptography

History of cryptography Cryptanalysis Outline of cryptography

Symmetric-key algorithm Block cipher Stream cipher Public-key cryptography Cryptographic hash function Message authentication code Random numbers Steganography

Category Portal WikiProject

This article is issued from Wikipedia - version of the 5/2/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.