DMCA
CryptDB: A Practical Encrypted Relational DBMS
| Citations: | 8 - 1 self |
BibTeX
@MISC{Popa_cryptdb:a,
author = {Raluca Ada Popa and Nickolai Zeldovich and Hari Balakrishnan},
title = {CryptDB: A Practical Encrypted Relational DBMS},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
CryptDB is a DBMS that provides provable and practical privacy in the face of a compromised database server or curious database administrators. CryptDB works by executing SQL queries over encrypted data. At its core are three novel ideas: an SQL-aware encryption strategy that maps SQL operations to encryption schemes, adjustable query-based encryption which allows CryptDB to adjust the encryption level of each data item based on user queries, and onion encryption to efficiently change data encryption levels. CryptDB only empowers the server to execute queries that the users requested, and achieves maximum privacy given the mix of queries issued by the users. The database server fully evaluates queries on encrypted data and sends the result back to the client for final decryption; client machines do not perform any query processing and client-side applications run unchanged. Our evaluation shows that CryptDB has modest overhead: on the TPC-C benchmark on Postgres, CryptDB reduces throughput by 27 % compared to regular Postgres. Importantly, CryptDB does not change the innards of existing DBMSs: we realized the implementation of CryptDB using client-side query rewriting/encrypting, user-defined functions, and server-side tables for public key information. As such, CryptDB is portable; porting CryptDB to MySQL required changing 86 lines of code, mostly at the connectivity layer. 1.
Keyphrases
practical encrypted relational dbms sql operation curious database administrator data item query processing adjustable query-based encryption data encryption level tpc-c benchmark user-defined function user query public key information regular postgres encryption scheme final decryption encryption level practical privacy onion encryption server-side table maximum privacy sql query sql-aware encryption strategy connectivity layer novel idea client-side query database server client machine client-side application modest overhead compromised database server
