Skip to content

Library 4 Pairing-based TransformCrypto

Wall, Frederickson

Presentation on cryptography and privacy technologies.

Summary

### Introduction to Pairing-Based Cryptography At 00:00, Bob Wall and Colt Frederickson introduce an open-source cryptographic library designed to make pairing-based cryptography and proxy re-encryption practical for enterprise software engineering.

### Mathematical Mechanics of Proxy Re-Encryption At 09:00, the speakers explain proxy re-encryption (PRE). The protocol allows a semi-trusted third party (such as a cloud storage server) to transform ciphertext encrypted under Alice's public key into ciphertext that can be decrypted by Bob's private key, without the proxy ever seeing the plaintext data or private keys.

### Implementing Bilinear Pairings on Elliptic Curves At 18:02, the presenters delve into the underlying mathematics, discussing bilinear pairings (such as Tate and Weil pairings) constructed over specialized elliptic curves. They detail how these mathematical structures enable non-interactive access delegation, identity-based encryption (IBE), and fine-grained access control policies.

### Enterprise Access Delegation and Offboarding Workflows At 27:04, Wall and Frederickson demonstrate practical enterprise applications. In multi-user cloud platforms, PRE enables dynamic data sharing—such as onboarding external contractors or medical specialists—without requiring the original data owner to repeatedly decrypt and re-encrypt files.

### Crypto-Shredding and Revocation Architecture Concluding at 36:00, the authors address key revocation and "crypto-shredding." By securely discarding or invalidating re-encryption keys stored on the proxy, access to massive historical datasets is cryptographically severed instantly, eliminating the need to physically delete multi-terabyte files from distributed storage.

(AI summary — Gemini Flash)

Related talks