Revocable identity-based encryption (RIBE) is an extension of IBE that satisfies a key revocation mechanism to manage a number of users dynamically and efficiently. To resist quantum attacks, two adaptively secure lattice-based RIBE schemes are known in the (quantum) random oracle model ((Q)ROM). Wang et al.’s scheme that is secure in the ROM has large secret keys depending on the depth of a binary tree and its security reduction is not tight. Ma and Lin’s scheme that is secure in the QROM has large ciphertexts depending on the length of identities and is not anonymous. In this paper, we propose an adaptively secure lattice-based RIBE scheme that is secure in the QROM. Our scheme has compact parameters, where the ciphertext-size is smaller than Wang et al.’s scheme and the secret key size is the same as Ma and Lin’s scheme. Moreover, our scheme is anonymous and its security reduction is completely tight. We design the proposed scheme by modifying Ma–Lin’s scheme instantiated by the Gentry–Peikert–Vaikuntanathan (GPV) IBE. We can obtain the advantages of our scheme by making use of Katsumata et al.’s proof technique of the GPV IBE in the QROM.

可撤销的基于身份的加密 (RIBE) 是 IBE 的扩展，它满足密钥撤销机制以动态有效地管理多个用户。为了抵抗量子攻击，在（量子）随机预言模型 ((Q)ROM) 中已知两种自适应安全的基于格的 RIBE 方案。Wang 等人的 ROM 中的安全方案根据二叉树的深度具有很大的密钥，并且其安全性降低不严格。Ma和Lin在QROM中的安全方案根据身份的长度有很大的密文，并且不是匿名的。在本文中，我们提出了一种自适应安全的基于格的 RIBE 方案，该方案在 QROM 中是安全的。我们的方案具有紧凑的参数，其中密文大小小于王等人的方案，密钥大小与马和林的方案相同。而且，我们的方案是匿名的，其安全性降低非常严格。我们通过修改由 Gentry-Peikert-Vaikuntanathan (GPV) IBE 实例化的 Ma-Lin 方案来设计所提出的方案。我们可以通过使用 Katsumata 等人的 QROM 中 GPV IBE 的证明技术来获得我们方案的优势。