On the power of rewinding simulators in functional encryption