Abstract:In an encrypted database, all data items stored at the server are encrypted and some operations can be performed directly over ciphertexts. Most existing encrypted database schemes cannot support data interoperability, that is, it cannot handle complex queries which require the output of one operator as the input to another. Wong et al. presented the encrypted database SDB (SIGMOD'14), and it is the only scheme that achieves data interoperability to the best of our knowledge. Recently, Cao et al. revisited the security of SDB (PVLDB'21) and proposed a ciphertext-only attack named "co-prime" attack. Their attack has a high success rate (84.9–99.9% on real-world benchmarks) and works on several common operations in SDB, including addition , sum , equi-join and group-by . However, the attack is time-consuming when the plaintext space (denoted as M ) is large, since the time complexity is , or O ( M ) with the meet-in-the-middle strategy. Cao et al. 's experiments showed that the attack takes minutes on a laptop when . And the expected time cost will be 15,261 years if , which is infeasible. In addition, the authors provided the countermeasures to prevent co-prime attack. Our main contribution in this paper is twofold. First, we propose an improved ciphertext-only attack based on lattice reduction against SDB with time complexity O (1). Our attack works on not only the previous four operations discussed by Cao et al., but also some aggregate operations, and its success rate is the same as that of co-prime attack. With the same parameters, our attack only takes s on a laptop, which is 37 faster than co-prime attack. Besides, our attack works for large M up to while the time cost remains almost unchanged. Thus, our attack is much more efficient and powerful. Next, we analyze the countermeasures proposed by Cao et al. and present an efficient attack with the orthogonal lattice reduction method, which denies the security of Cao et al.'s modified scheme. The time complexity is , and the attack takes several minutes on a laptop. Furthermore, we validate our attacks on two real-world public datasets and make some discussions.

Cryptanalysis of an Encrypted Database in SIGMOD '14

Efficient cryptanalysis of an encrypted database supporting data interoperability

On the Interoperability of Encrypted Databases

Encrypted Databases: Progresses and Challenges

Enc2DB: A Hybrid and Adaptive Encrypted Query Processing Framework

SQL queries over encrypted databases: a survey

CryptMDB: A Practical Encrypted MongoDB over Big Data

ShieldDB: An Encrypted Document Database with Padding Countermeasures

Privacy-Preserving Queries On Encrypted Data

Toward Fully Functional Encrypted Databases

Research on order-preserving encryption scheme based on CryptDB

Storage and Query over Encrypted Character and Numerical Data in Database

Encrypted Databases Made Secure Yet Maintainable

Secure Computation over Encrypted Databases

Snowball: Another View on Side-Channel Key Recovery Tools.

QSDB: an Encrypted Database Model for Privacy-Preserving in Cloud Computing.

The tao of inference in privacy-protected databases

Progress of Cryptographic Access Control and Encryption Security Database

Fast Query over Encrypted Character Data in Database

SIG-DB: leveraging homomorphic encryption to Securely Interrogate privately held Genomic DataBases

Interpreting and Mitigating Leakage-Abuse Attacks in Searchable Symmetric Encryption