Is it possible to check if key can decrypt ciphertext?

[touatily]

I would like to know there is it possible to check if a key can decrypt ciphertext without trying to decrypt it.

I know that, trying to decrypt a ciphertext with unauthorized key generates an error. So we can assume that the policy is not satisfied. But I need more proper way to do it.

[brent-zeutro]

I don't believe that functionality is explicitly given, but should not be very difficult to tweak on.

…

On 4/16/20 6:29 AM, Lyes Touati wrote: I would like to know there is it possible to check if a key can decrypt ciphertext without trying to decrypt it. I know that, trying to decrypt a ciphertext with unauthorized key generates an error. So we can assume that the policy is not satisfied. But I need more proper way to do it. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#34>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AB4ZTT7EDG7KHNINFDKZ7ZDRM3TZVANCNFSM4MJRL42A>.

[touatily]

I think it is an interesting functionnality. Because we should always test first if our key is elligible to decrypt or not.

[zacharywhitley]

Now I'm curious, in an ABE system what is the status of the security of the attributes and policies? Can they be recovered from the key or cypher text? If they can't are there any security guarantees about not being able to recover them? ie. Can I include an attribute on a key that the key owner is unaware of?