Dual receiver encryption (DRE), proposed by Diament et al. at ACM CCS 2004, is a special
extension notion of public-key encryption, which enables two independent receivers to
decrypt a ciphertext into a same plaintext. This primitive is quite useful in designing
combined public key cryptosystems and denial of service attack-resilient protocols. Up till
now, a series of DRE schemes are constructed with bilinear pairing groups. In this work, we
introduce the first construction of lattice-based DRE. Our scheme is secure against chosen …

Dual receiver encryption (DRE), proposed by Diament et al. at ACM CCS 2004, is a special
extension notion of public-key encryption, which enables two independent receivers to
decrypt a ciphertext into a same plaintext. This primitive is quite useful in designing
combined public key cryptosystems and denial of service attack-resilient protocols. Up till
now, a series of DRE schemes are constructed with bilinear pairing groups. In this work, we
introduce the first construction of lattice-based DRE. Our scheme is secure against chosen …