Homomorphic encryption (HE) offers data confidentiality by executing queries directly on encrypted fields in the database-as-a-service (DaaS) paradigm. While fully HE exhibits great expressiveness but prohibitive performance overhead, a better balance between flexibility and efficiency can be achieved by partially HE schemes. Performance-wise, however, the encryption rate of state-of-the-art HE schemes is still orders of magnitude lower than the I/O throughput, rendering the HE scheme the performance bottleneck. This paper proposes INCHE, an incrementally homomorphic encryption scheme, which aims to boost the performance of HE schemes by incrementally encrypting fields in relational databases. The key idea of INCHE is to explore the intrinsic correlation between plaintexts and cache them for future reuse such that expensive HE primitives from plaintexts to ciphertexts are avoided. We prove the semantic security of INCHE under the chosen-plaintext attack (CPA) model and show that its time complexity is linear in the plaintext length. We implement an INCHE prototype by extending the Symmetria cryptosystem and verify its effectiveness on both randomly-generated data and the TPC-H benchmark.
翻译:基因加密(HE)通过直接在数据库-服务(DaaS)模式的加密字段上进行直接查询,提供数据保密性。虽然该技术网完全显示出巨大的表现性,但令人望而却步的绩效管理,但部分HE计划可以实现灵活性和效率之间的更好平衡。但是,从性能角度看,最先进的HE计划的加密率仍然低于I/O通过量,使HE计划成为性能瓶颈。本文提议了INCHE,这是一个渐进式的同质加密方案,目的是通过在相关数据库中逐步加密域来提高HE计划的性能。INCHE的关键思想是探索普通文本之间的内在关联,并隐藏这些文本,以便将来再利用,避免昂贵的HE原始文本到密码。我们证明,根据所选的文案攻击(CPA)模式,INCHE的语系安全性能是直线式的。我们通过扩展Symetria Crypto系统来实施INCHE原型,并核查其随机生成数据的有效性。