Abstract:In an encrypted database, all data items stored at the server are encrypted and some operations can be performed directly over ciphertexts. Most existing encrypted database schemes cannot support data interoperability, that is, it cannot handle complex queries which require the output of one operator as the input to another. Wong et al. presented the encrypted database SDB (SIGMOD'14), and it is the only scheme that achieves data interoperability to the best of our knowledge. Recently, Cao et al. revisited the security of SDB (PVLDB'21) and proposed a ciphertext-only attack named "co-prime" attack. Their attack has a high success rate (84.9–99.9% on real-world benchmarks) and works on several common operations in SDB, including addition , sum , equi-join and group-by . However, the attack is time-consuming when the plaintext space (denoted as M ) is large, since the time complexity is , or O ( M ) with the meet-in-the-middle strategy. Cao et al. 's experiments showed that the attack takes minutes on a laptop when . And the expected time cost will be 15,261 years if , which is infeasible. In addition, the authors provided the countermeasures to prevent co-prime attack. Our main contribution in this paper is twofold. First, we propose an improved ciphertext-only attack based on lattice reduction against SDB with time complexity O (1). Our attack works on not only the previous four operations discussed by Cao et al., but also some aggregate operations, and its success rate is the same as that of co-prime attack. With the same parameters, our attack only takes s on a laptop, which is 37 faster than co-prime attack. Besides, our attack works for large M up to while the time cost remains almost unchanged. Thus, our attack is much more efficient and powerful. Next, we analyze the countermeasures proposed by Cao et al. and present an efficient attack with the orthogonal lattice reduction method, which denies the security of Cao et al.'s modified scheme. The time complexity is , and the attack takes several minutes on a laptop. Furthermore, we validate our attacks on two real-world public datasets and make some discussions.

BOPE: Boundary Order-Preserving Encryption Scheme in Relational Database System

Research on order-preserving encryption scheme based on CryptDB

HOPE: Homomorphic Order-Preserving Encryption for Outsourced Databases -- A Stateless Approach

MDOPE: Efficient multi-dimensional data order preserving encryption scheme

A Practical and Secure Stateless Order Preserving Encryption for Outsourced Databases

Semi-order Preserving Encryption

Secure and Efficient Multi-Attribute Range Queries Based on Comparable Inner Product Encoding

OBI: a multi-path oblivious RAM for forward-and-backward-secure searchable encryption

Elliptic code-based oblivious polynomial evaluation

Efficient Bi-objective SQL Optimization for Enclaved Cloud Databases with Differentially Private Padding.

Stateless and Non-Interactive Order-Preserving Encryption for Outsourced Databases through Subtractive Homomorphism

A Review of Order Preserving Encryption Schemes

Order-Preserving Database Encryption with Secret Sharing

Ciphertext Range Query Scheme Against Agent Transfer and Permission Extension Attacks for Cloud Computing

Encryption Algorithm Supporting Relational Calculations in Cloud Computing

Delegatable Order-Revealing Encryption

Round-Efficient Oblivious Database Manipulation

Enc2DB: A Hybrid and Adaptive Encrypted Query Processing Framework

Security Analysis on One-to-Many Order Preserving Encryption-Based Cloud Data Search

Efficient cryptanalysis of an encrypted database supporting data interoperability

Generic Construction of Publicly Verifiable Predicate Encryption