We describe two new public key broadcast encryption systems for stateless receivers. Both systems are fully secure against any number of colluders. In our first construction both ciphertexts and private keys are of constant size (only two group elements), for any subset of receivers. The public key size in this system is linear in the total number of receivers. Our second system is a generalization of the first that provides a tradeoff between ciphertext size and public key size. For example, we achieve a collusion resistant broadcast system for n users where both ciphertexts and public keys are of size O( √ n) for any subset of receivers. We discuss several applications of these systems.
REF propose a public-key broadcast encryption scheme which achieves size O(1) for both header and private key.
Collusion Resistant Broadcast Encryption with Short Ciphertexts and Private Keys
CRYPTO
Computer Science