DMCA
DupLESS: Server-Aided Encryption for Deduplicated Storage ∗
Cached
Download Links
| Citations: | 28 - 0 self |
BibTeX
@MISC{Bellare_dupless:server-aided,
author = {Mihir Bellare and Sriram Keelveedhi and Thomas Ristenpart},
title = {DupLESS: Server-Aided Encryption for Deduplicated Storage ∗},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Cloud storage service providers such as Dropbox, Mozy, and others perform deduplication to save space by only storing one copy of each file uploaded. Should clients conventionally encrypt their files, however, savings are lost. Message-locked encryption (the most prominent manifestation of which is convergent encryption) resolves this tension. However it is inherently subject to brute-force attacks that can recover files falling into a known set. We propose an architecture that provides secure deduplicated storage resisting brute-force attacks, and realize it in a system called DupLESS. In DupLESS, clients encrypt under message-based keys obtained from a key-server via an oblivious PRF protocol. It enables clients to store encrypted data with an existing service, have the service perform deduplication on their behalf, and yet achieves strong confidentiality guarantees. We show that encryption for deduplicated storage can achieve performance and space savings close to that of using the storage service with plaintext data. 1
Keyphrases
deduplicated storage server-aided encryption brute-force attack space saving oblivious prf protocol prominent manifestation storage service convergent encryption message-based key service perform deduplication encrypted data message-locked encryption achieves strong confidentiality guarantee plaintext data cloud storage service provider
