2016/02/23 by Michael Egorov, MacLane Wilkison, Egorov, Michael +1 · 2 voices
Computer Science · #Cloud Data Security Solutions #Computer network #Computer science #Computer security #Cryptography and Data Security #Database #Encryption #Filesystem-level encryption #Key (lock) #On-the-fly encryption #Proxy server #Security and Verification in Computing #cs.CR #cs.DB #sort
paper · pdf · doi:10.48550/arxiv.1602.07168
Website of the project: https://www.zerodb.io/
openalex publication_date 2016/02/23 · arxiv created 2016/03/08 · arxiv updated 2016/03/09 · openalex created_date 2022/08/27 · openalex updated_date 2026/08/05
ZeroDB is an end-to-end encrypted database that enables clients to operate on (search, sort, query, and share) encrypted data without exposing encryption keys or cleartext data to the database server. The familiar client-server architecture is unchanged, but query logic and encryption keys are pushed client-side. Since the server has no insight into the nature of the data, the risk of data being exposed via a server-side data breach is eliminated. Even if the server is successfully infiltrated, adversaries would not have access to the cleartext data and cannot derive anything useful out of disk or RAM snapshots. ZeroDB provides end-to-end encryption while maintaining much of the functionality expected of a modern database, such as full-text search, sort, and range queries. Additionally, ZeroDB uses proxy re-encryption and/or delta key technology to enable secure, granular sharing of encrypted data without exposing keys to the server and without sharing the same encryption key between users of the database.