Leakage-resilient certificate-based encryption