StealthDB: a Scalable Encrypted Database with Full SQL Query Support

Gribov, Alexey; Vinayagamurthy, Dhinakaran; Gorbunov, S.

doi:10.48550/arxiv.1711.02279

Cited by 2 publications

(2 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The use of SGX in many scenarios has been studied, e.g., supporting secure distributed data analytics in the cloud [55], [56], secure networking [57], [58], [59], privacy preserving biomedical analysis [60], [61], [62], etc. It has also been developed to support secure database queries [63], [64], [65], [66].…”

Section: Related Workmentioning

confidence: 99%

Toward Scalable Fully Homomorphic Encryption Through Light Trusted Computing Assistance

Wang,

Jiang,

Shen

et al. 2019

Preprint

View full text Add to dashboard Cite

It has been a long standing problem to securely outsource computation tasks to an untrusted party with integrity and confidentiality guarantees. While fully homomorphic encryption (FHE) is a promising technique that allows computations performed on the encrypted data, it suffers from a significant slow down to the computation. In this paper we propose a hybrid solution that uses the latest hardware Trusted Execution Environments (TEEs) to assist FHE by moving the bootstrapping step, which is one of the major obstacles in designing practical FHE schemes, to a secured SGX enclave. TEEFHE, the hybrid system we designed, makes it possible for homomorphic computations to be performed on smaller ciphertext and secret key, providing better performance and lower memory consumption. We make an effort to mitigate side channel leakages within SGX by making the memory access patterns totally independent from the secret information. The evaluation shows that TEEFHE effectively improves the software only FHE schemes in terms of both time and space.

show abstract

Section: Related Workmentioning

confidence: 99%

Toward Scalable Fully Homomorphic Encryption Through Light Trusted Computing Assistance

Wang,

Jiang,

Shen

et al. 2019

Preprint

View full text Add to dashboard Cite

show abstract

“…SGX databases. Multiple database prototypes for Intel SGX1 exist, e. g., StealthDB [9], EncDBDB [8], CryptSQLite [19], EnclaveDB [15], and even DuckDB [2]. In particular, our previous work describes and implements different approaches for a secure OLAP database, deploying vectorized, compressed, and encrypted execution and placing different components of the engine inside the enclave.…”

Section: Introductionmentioning

confidence: 99%

DuckDB-SGX2: The Good, The Bad and The Ugly within Confidential Analytical Query Processing

Battiston,

Felius,

Ansmink

et al. 2024

Proceedings of the 20th International Workshop on Data Management on New Hardware

View full text Add to dashboard Cite

We provide an evaluation of an analytical workload in a confidential computing environment, combining DuckDB with two technologies: modular columnar encryption in Parquet files (data at rest) and the newest version of the Intel SGX Trusted Execution Environment (TEE), providing a hardware enclave where data in flight can be (more) securely decrypted and processed. One finding is that the "performance tax" for such confidential analytical processing is acceptable compared to not using these technologies. We eventually manage to run TPC-H SF30 with under 2x overhead compared to non-encrypted, non-enclave execution; we show that, specifically, columnar compression and encryption are a good combination. Our second finding consists of dos and don'ts to tune DuckDB to work effectively in this environment. There are various performance hazards: potentially 5x higher cache miss costs inside the enclave, NUMA penalties, and highly elevated cost of swapping pages in and out of the enclave -which is also triggered indirectly by using a non-SGX-aware malloc library.

show abstract

StealthDB: a Scalable Encrypted Database with Full SQL Query Support

Cited by 2 publications

References 0 publications

Toward Scalable Fully Homomorphic Encryption Through Light Trusted Computing Assistance

Toward Scalable Fully Homomorphic Encryption Through Light Trusted Computing Assistance

DuckDB-SGX2: The Good, The Bad and The Ugly within Confidential Analytical Query Processing

Contact Info

Product

Resources

About