1. A method for providing broadcast encryption for a group of n receivers, the said method using a key generation engine, an encryption engine and a decryption engine, comprising: receiving a broadcast payload to be encrypted; generating by the key generation engine a random gεG, where G is a prime order group of order p, a random secret value βεZ/pZ and n blinding values s u εZ/pZ, u being the receiver index and Z/pZ being a finite field of order p, and for i=1,. .. ,2 n−1 −2 generating pairs of values a i ,b i , generating by the key generation engine a plurality of decryption keys, each of the plurality of decryption keys uniquely associated with a receiver's identity i by means of the corresponding blinding value s u , corresponding to the receiver i, the decryption key computed using the blinding value s u , the generation engine and the pairs of values a i ,b i comprising of at least log n elements of group G and comprising of at least 2*(log n−2) elements of Z/pZ, and for a subset R of revoked receivers among the group of n receivers, generating by the encryption engine a random value tεZ/pZ, computing by the key generation engine a value V = ∏ i ∈ R ⁢ ⁢ g { path i } wherein i represents the identity of a receiver and {path i } is a product of at most log n values a i and b i , generating by the encryption engine a cryptogram hdr=(hdr 1 ,hdr 2 ) comprising of at least two elements of group G wherein hdr 1 and hdr 2 are two parts of the cryptogram using the value V, the random value t and group generator g and generating a session key SK, wherein the session key SK is computed by the encryption engine using a bilinear map as SK = e ⁡ ( g β , V ) t = e ⁡ ( g , g ) β ⁢ ⁢ t ⁢ ∑ i ∈ R ⁢ { path i } ; and wherein a symmetric key is derived from the session key or parts of the session key, and encrypt the payload wit the symmetric key.