2020/02/12 by Benny Fuhry, Fuhry, Benny, Jayanth Jain H A +3
Computer Science · #Cryptographic Implementations and Security #Cryptography and Data Security #Cryptography and Security (cs.CR) #Distributed systems and fault tolerance #FOS: Computer and information sciences
paper · pdf · doi:10.48550/arxiv.2002.05097
openalex publication_date 2020/02/12 · openalex created_date 2022/07/26 · openalex updated_date 2026/07/28
Data confidentiality is an important requirement for clients when outsourcing\ndatabases to the cloud. Trusted execution environments, such as Intel SGX,\noffer an efficient, hardware-based solution to this cryptographic problem.\nExisting solutions are not optimized for column-oriented, in-memory databases\nand pose impractical memory requirements on the enclave. We present EncDBDB, a\nnovel approach for client-controlled encryption of a column-oriented, in-memory\ndatabases allowing range searches using an enclave. EncDBDB offers nine\nencrypted dictionaries, which provide different security, performance and\nstorage efficiency tradeoffs for the data. It is especially suited for complex,\nread-oriented, analytic queries, e.g., as present in data warehouses. The\ncomputational overhead compared to plaintext processing is within a millisecond\neven for databases with millions of entries and the leakage is limited.\nCompressed encrypted data requires less space than a corresponding plaintext\ncolumn. Furthermore, the resulting code - and data - in the enclave is very\nsmall reducing the potential for security-relevant implementation errors and\nside-channel leakages.\n