Abstract. We introduce the notion of certificate-based encryption. In this model, a certificate -or, more generally, a signature -acts not only as a certificate but also as a decryption key. To decrypt a message, a keyholder needs both its secret key and an up-to-date certificate from its CA (or a signature from an authorizer). Certificate-based encryption combines the best aspects of identity-based encryption (implicit certification) and public key encryption (no escrow). We demonstrate how certificate-based encryption can be used to construct an efficient PKI requiring less infrastructure than previous proposals, including Micali's Novomodo, Naor-Nissim and Aiello-Lodha-Ostrovsky.
In Eurocrypt 2003, Gentry REF introduced the notion of certificate-based encryption (CBE).
Certificate-based encryption and the certificate revocation problem
In Advances in Cryptology - EUROCRYPT’03, Ploand, LNCS 2656
Computer Science