In the context of Project Idunn, Ikerlan has developed a comprehensive study on attribute-based encryption (ABE), a sophisticated set of one-to-many encryption schemes that facilitate data encryption and decryption by linking it with specific access policies and attributes. Recognized for its robust security features, ABE operates as an asymmetric encryption scheme. However, its computational demands can pose significant challenges for deployment on IoT devices. ABE encompasses various types and numerous schemes within each type, yet there is no universally accepted standard library for ABE implementation. Existing libraries vary significantly in the schemes they support, compelling developers to navigate a complex landscape to balance efficiency and security in their projects.
This study done within Project Idunn examines eleven ABE libraries, delving into their core features, the mathematical libraries they utilize, and the specific ABE schemes they offer. Additionally, we conduct an experimental analysis on the four libraries that are actively maintained, highlighting some of the insecure ABE schemes they implement. This analysis involves implementing the schemes provided by these libraries and measuring their execution times on different architectures, specifically ARMv6 and ARMv8. The results of these experiments furnish developers with critical insights, enabling them to make informed decisions when selecting the most appropriate library for their needs, based on objective and well-defined criteria.
Authors and Contact Information
This article was developed by a team of experts dedicated to advancing encryption technologies:
- Aintzane Mosteiro-Sanchez (Ikerlan)
- Marc Barcelo (Ikerlan)
- Jasone Astorga (EHU)
- Aitor Urbieta (Ikerlan)
Keywords:
ABE , IoT , CP-ABE , IIoT , KP-ABE , dCP-ABE