Abstract:Order-preserving encryption (OPE) is a fundamental cryptographic tool for enabling efficient range queries on encrypted data in outsourced databases. Despite its importance, existing OPE schemes face critical limitations that hinder their practicality. Stateful designs require clients to maintain plaintext-to-ciphertext mappings, imposing significant storage and management overhead. Stateless designs often rely on interactive protocols between the client and server, leading to high communication latency and limited scalability. These limitations make existing schemes unsuitable for real-world applications that demand simplicity, efficiency, and scalability. In this work, we present Homomorphic OPE (HOPE), a new OPE scheme that eliminates client-side storage and avoids additional client-server interaction during query execution. HOPE leverages the additive property of homomorphic encryption to introduce a novel comparison key mechanism, which transforms ciphertext comparison into a randomized difference computation. This mechanism ensures that only the sign of the comparison is preserved while fully masking the underlying plaintext values, enabling secure and efficient range queries without leaking additional information about the data. We provide a formal cryptographic analysis of HOPE, proving its security under the widely accepted IND-OCPA model. Our proofs rigorously demonstrate that the comparison key mechanism reveals no information beyond the order of the plaintexts and ensures resistance to both chosen-plaintext attacks and frequency analysis. To validate the practicality of HOPE, we conduct extensive experiments comparing it with state-of-the-art OPE schemes. The results demonstrate that HOPE achieves competitive query performance while addressing the key limitations of existing designs, making it a scalable and secure solution for outsourced database systems.

HOPE: Homomorphic Order-Preserving Encryption for Outsourced Databases -- A Stateless Approach

Stateless and Non-Interactive Order-Preserving Encryption for Outsourced Databases through Subtractive Homomorphism

A Practical and Secure Stateless Order Preserving Encryption for Outsourced Databases

Order-Preserving Database Encryption with Secret Sharing

MDOPE: Efficient multi-dimensional data order preserving encryption scheme

BOPE: Boundary Order-Preserving Encryption Scheme in Relational Database System

HOPE-L - A Lossless Database Watermarking Method in Homomorphic Encryption Domain.

Semi-order Preserving Encryption

Security Analysis on One-to-Many Order Preserving Encryption-Based Cloud Data Search

Elliptic code-based oblivious polynomial evaluation

Secure and Efficient Multi-Attribute Range Queries Based on Comparable Inner Product Encoding

A Review of Order Preserving Encryption Schemes

Privacy-Preserving Multi-Range Queries for Secure Data Outsourcing Services

Efficient Multi-Keyword Ranked Search over Outsourced Cloud Data Based on Homomorphic Encryption

Towards Practical Multi-Client Order-Revealing Encryption: Improvement and Application

HOPE: Software Defect Prediction Model Construction Method via Homomorphic Encryption

Exploring the Security Vulnerability in Frequency-Hiding Order-Preserving Encryption

Practical Frequency-Hiding Order-Preserving Encryption with Improved Update

Research on order-preserving encryption scheme based on CryptDB

Secure outsourced calculations with homomorphic encryption

Delegatable Order-Revealing Encryption