CP-ABE公式推导笔记

Threshold Ciphertext Policy Attribute-Based Encryption with Constant
Size Ciphertexts文章中解密公式推导

推导公式
$$M=C0\cdot e(C2,D2)\setminus e(C1,D1)$$
$$C0=M\cdot Z^s$$
$$C1=g^s$$
$$C2=(h0\prod _{j\in S\bigcup \Omega }{h}_j{)}^s$$
$$D1=\prod _{i\in A^{\prime }\bigcup \Omega }(a_i\prod _{i\in S\bigcup \Omega ,j\ne i}(c_{i,j}){)}^{{\Delta }_{i,A^{\prime }\bigcup \Omega }(0)}$$
$$D2=\prod _{i\in A^{\prime }\bigcup \Omega }(b_i{)}^{{\Delta }_{i,A^{\prime }\bigcup \Omega }(0)}$$

推导
$$M=C0\cdot e(C2,D2)\setminus e(C1,D1)$$
$$=\frac{M\cdot e(g,g_2{)}^{sx}\cdot e(C2,D2)}{e(C1,D1)}$$
$$化简\frac{e(C2,D2)}{e(C1,D1)}:$$
$$\frac{e((h0h{j}_{(j\in S\bigcup \Omega )}{)}^s,g^{{\sum }_{i\in A^{\prime }\bigcup \Omega }^{}ri\cdot {\Delta }_{i,A^{\prime }\bigcup \Omega }(0)})}{e(g^s,g_2^{\sum q(i)\cdot {\Delta }_{i,A^{\prime }\bigcup \Omega }(0)}[(h0hi{)}^{r_i}\cdot h{j}_{(j\in S\bigcup \Omega ,j\ne i)}^{ri}{]}^{\sum {\Delta }_{i,A^{\prime }\bigcup \Omega (0)}})}$$
$$=\frac{e((h0h{j}_{(j\in S\bigcup \Omega )}{)}^s,g^{{\sum }_{i\in A^{\prime }\bigcup \Omega }^{}ri\cdot {\Delta }_{i,A^{\prime }\bigcup \Omega }(0)})}{e(g^s,g_2^x)\cdot e(g^s,(h0hih{j}_{(j\in S\bigcup \Omega ,j\ne i)}{)}^{\sum {\Delta }_{i,A^{\prime }\bigcup \Omega (0)}})}$$
$$=\frac{1}{e(g^s,g_2^x)}=\frac{1}{e(g,g_2{)}^{sx}}$$
$$总体化简得M.$$
$$(注意(j\in S\bigcup \Omega ,j\ne i)和(j\in S\bigcup \Omega )区别在于h_i)$$