encryption4all / ibe Goto Github PK

Currently the IBKEM trait is not very flexible. Some constructions require a public key in the decapsulation function (for example the FO variants). Right now, we pass an Option<&Self::Pk> to the decapsulation function, which panics at runtime when no public key is given, but ideally this would be a compile-time error.

• implement/derive zeroize for (copies of) user secret keys,
• implement/derive zeroize for (copies of) master secret keys,
• implement/derive zeroize for (copies of) shared secrets.
• also add the trait bounds to the KEM/IBE traits.

Currently, this library uses the alloc feature of BLS12-381 (which is enabled by default) for some optimizations. I think we should introduce this as a default, but we should always have an option to not use allocation. This is useful when you compile this lib for an embedded target (i.e., a hardware module performing extraction).

Currently, the following allocating optimizations are used:

• some decryption algorithms perform the multi_miller_loop to compute multiple pairings.
• some setup/keygen algorithms use w-NAF precomputations.