作者: Nickolai Zeldovich , Raluca Ada Popa , Hari Balakrishnan
DOI:
关键词:
摘要: CryptDB is a DBMS that provides provable and practical privacy in the face of compromised database server or curious administrators. works by executing SQL queries over encrypted data. At its core are three novel ideas: an SQL-aware encryption strategy maps operations to schemes, adjustable query-based which allows adjust level each data item based on user queries, onion efficiently change levels. only empowers execute users requested, achieves maximum given mix issued users. The fully evaluates sends result back client for final decryption; machines do not perform any query processing client-side applications run unchanged. Our evaluation shows has modest overhead: TPC-C benchmark Postgres, reduces throughput 27% compared regular Postgres. Importantly, does innards existing DBMSs: we realized implementation using rewriting/encrypting, user-defined functions, server-side tables public key information. As such, portable; porting MySQL required changing 86 lines code, mostly at connectivity layer.