Verifiable Attribute-based Encryption

Abstract. In this paper, we construct two verifiable attribute-based encryption schemes. One is for a single authority ABE, and the other is for a multi authority ABE. Not only our schemes are proved secure as the previous ABE schemes, they also provide a verifiable property. Adding the verification property has at least two advantages: first, it allows the user to immediately check the correctness of the keys which later would be used to decrypt all authorized ciphertexts at any time, and second, if the keys pass the verification but the user still does not rightly decrypt out the message, something might be wrong with the attributes or ciphertexts. We formalize the notion of verifiable attribute-based encryption and prove our schemes in our model.