Abstract: Existing ciphertext-policy attribute-based encryption (CP-ABE) schemes primarily determine who is authorized to decrypt, yet they do not guarantee privacy once ciphertexts are decrypted.