Traitor Tracing for Threshold Decryption

ePrint Report: Traitor Tracing for Threshold Decryption

Dan Boneh, Aditi Partap, Lior Rotem

In a traitor tracing system there are $n$ parties and each party holds a secret key. A broadcaster uses an encryption key to encrypt a message $m$ to a ciphertext $c$ so that every party can decrypt~$c$ using its secret key and obtain $m$. Suppose a subset of parties ${\cal J} \subseteq [n]$ combine their secret keys to create a pirate decoder $D(\cdot)$ that can decrypt ciphertexts …

ciphertext dan decrypt decryption encrypt encryption eprint report key message party report secret secret key system threshold tracing