Hermes: I/O-Efficient Forward-Secure Searchable Symmetric Encryption - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2023

Hermes: I/O-Efficient Forward-Secure Searchable Symmetric Encryption

Abstract

Dynamic Symmetric Searchable Encryption (SSE) enables a user to outsource the storage of an encrypted database to an untrusted server, while retaining the ability to privately search and update the outsourced database. The performance bottleneck of SSE schemes typically comes from their I/O efficiency. Over the last decade, a line of work has substantially improved that bottleneck. However, all existing I/O-efficient SSE schemes have a common limitation: they are not forward-secure. Since the seminal work of Bost at CCS 2016, forward security has become a de facto standard in SSE. In the same article, Bost conjectures that forward security and I/O efficiency are incompatible. This explains the current status quo, where users are forced to make a difficult choice between security and efficiency. The central contribution of this paper it to show that, contrary to what the status quo suggests, forward security and I/O efficiency can be realized simultaneously. This result is enabled by two new key techniques. First, we make use of a controlled amount of client buffering, combined with a deterministic update schedule. Second, we introduce the notion of SSE supporting dummy updates. In combination, those two techniques offer a new path to realizing forward security, which is compatible with I/O efficiency. Our new SSE scheme, Hermes, achieves sublogarithmic I/O efficiency, constant storage efficiency, with standard leakage, as well as backward and forward security. Practical experiments confirm that Hermes achieves excellent performance.

Keywords

Fichier principal
Vignette du fichier
Hermes.pdf (856.68 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-04282242 , version 1 (13-11-2023)

Licence

Identifiers

  • HAL Id : hal-04282242 , version 1

Cite

Brice Minaud, Michael Reichle. Hermes: I/O-Efficient Forward-Secure Searchable Symmetric Encryption. Asiacrypt 2023 - International Conference on the Theory and Application of Cryptology and Information Security, IACR, Dec 2023, Guangzhou, China. ⟨hal-04282242⟩
48 View
23 Download

Share

Gmail Mastodon Facebook X LinkedIn More