Group Signatures with Message-Dependent Opening: Formal Definitions and Constructions

Box 1

The black-box construction of an identity-based KEM from GS-MDO.

:

 :

 Output ().

IEnc():

 For :

 Output.

:

 Output .

IDec():

 Parse as

 For :

 If for some

then Output

 Else Output .