CryptDB: A Practical Encrypted Relational DBMS
Name
MIT-CSAIL-TR-2011-005.pdf
Size
419.38 KB
Format
Adobe PDF
Checksum (MD5)
1f4161683ebbb9bba490f86325976ec0
Author(s)
Popa, Raluca Ada
Zeldovich, Nickolai
Balakrishnan, Hari
Advisor(s)
Nickolai Zeldovich
Date Issued
January 26, 2011
Series/Report no.
MIT-CSAIL-TR-2011-005
Abstract
CryptDB is a DBMS that provides provable and practical privacy in the face of a compromised database server or curious database administrators. CryptDB works by executing SQL queries over encrypted data. At its core are three novel ideas: an SQL-aware encryption strategy that maps SQL operations to encryption schemes, adjustable query-based encryption which allows CryptDB to adjust the encryption level of each data item based on user queries, and onion encryption to efficiently change data encryption levels. CryptDB only empowers the server to execute queries that the users requested, and achieves maximum privacy given the mix of queries issued by the users. The database server fully evaluates queries on encrypted data and sends the result back to the client for final decryption; client machines do not perform any query processing and client-side applications run unchanged. Our evaluation shows that CryptDB has modest overhead: on the TPC-C benchmark on Postgres, CryptDB reduces throughput by 27% compared to regular Postgres. Importantly, CryptDB does not change the innards of existing DBMSs: we realized the implementation of CryptDB using client-side query rewriting/encrypting, user-defined functions, and server-side tables for public key information. As such, CryptDB is portable; porting CryptDB to MySQL required changing 86 lines of code, mostly at the connectivity layer.
Subjects
confidentiality
privacy
cloud computing
outsourced databases
queries over encrypted data
Terms of Use
Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported
Persistent DSpace Link
