M - Technische Universität Dresden

Indirect re-encryption scheme for recipient anonymity
MIX 0 MIX m MIX m+1
S MIX1 MIX2 MIX3 MIX4 MIX5 R
d s k s
Hj = cj (kj , Aj+1 , Hj+1 ) for j = m,..,0
d3 k3 k s
H m+1 = e
3
3
d 1 k 1
H 1
I 1
I 1 = k 0 (I)
encryption
k 1
4
4
H 2
I 2
observable
transfer
d 2 k 2
k 2
I j = k j-1 (I j-1 ) for j = 2,.., m+1
5
5
H 3
I 3
decryption
6
2
d 4 k 4
unobservable transfer
k 3
6
H 4
I 4
7
7
d 5 k 5
message header
message content
k 4
H 5
I 5
I
k 5
H
8
8
H 6
I 6
c 5 k 5
c 4 k 4
c 3 k 3
c 2 k 2
c 1 k 1
c s k s
k s
k 1
k 2
k 3
k 4
k 5
45
1
9