Journal
IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING
Volume 19, Issue 3, Pages 2023-2037Publisher
IEEE COMPUTER SOC
DOI: 10.1109/TDSC.2020.3043754
Keywords
Cryptography; Privacy; Encryption; Security; Keyword search; Indexes; Servers; Searchable encryption; size pattern; Oblivious RAM; leakage reduction
Categories
Funding
- National Natural Science Foundation of China [62032012]
- National Key Research and Development Program of China [2020YFB1005700]
Ask authors/readers for more resources
This article discusses the issue of size pattern leakage in dynamic searchable symmetric encryption (DSSE) schemes and proposes a new scheme called Eurus to address this problem, significantly reducing leakage and improving efficiency.
To achieve efficiently search and update on outsourced encrypted data, dynamic searchable symmetric encryption (DSSE) was proposed by just leaking some well-defined leakages. Though small, many recent works show that an attacker can exploit these leakages to undermine the security of existing DSSE schemes. In particular, an attacker can exploit even seemingly harmless size pattern to perform severe attacks. Many exiting schemes resort to oblivious RAM (ORAM) to hide search/access pattern; however, even such powerful cryptographic primitive cannot protect size pattern leakage. In this article, we first show that size pattern can lead to more information leakages, which is not well studied or protected by existing schemes. We then extend the existing privacy notion for DSSE to capture the size pattern leakage, achieving a strong forward and backward privacy definition. Following the definition, we propose a new DSSE scheme Eurus. Eurus can eliminate search/access pattern by relying on a multi-server ORAM scheme, meanwhile reducing size pattern with reasonable efficiency. We show that Eurus can reduce leakage significantly with better efficiency, compared with state-of-the-art leakage reduction schemes.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available