Paper 2021/1661

Waldo: A Private Time-Series Database from Function Secret Sharing

Emma Dauterman, Mayank Rathee, Raluca Ada Popa, and Ion Stoica

Abstract

Applications today rely on cloud databases for storing and querying time-series data. While outsourcing storage is convenient, this data is often sensitive, making data breaches a serious concern. We present Waldo, a time-series database with rich functionality and strong security guarantees: Waldo supports multi-predicate filtering, protects data contents as well as query filter values and search access patterns, and provides malicious security in the 3-party honest-majority setting. In contrast, prior systems such as Timecrypt and Zeph have limited functionality and security: (1) these systems can only filter on time, and (2) they reveal the queried time interval to the server. Oblivious RAM (ORAM) and generic multiparty computation (MPC) are natural choices for eliminating leakage from prior work, but both of these are prohibitively expensive in our setting due to the number of roundtrips and bandwidth overhead, respectively. To minimize both, Waldo builds on top of function secret sharing, enabling Waldo to evaluate predicates without client interaction. We develop new techniques for applying function secret sharing to the encrypted database setting where there are malicious servers, secret inputs, and chained predicates. With 32-core machines, Waldo runs a query with 8 range predicates over $2^{18}$ records in 3.03s, compared to 12.88s for an MPC baseline and 16.56s for an ORAM baseline. Compared to Waldo, the MPC baseline uses 9 − 82× more bandwidth between servers (for different numbers of records), while the ORAM baseline uses 20 − 152× more bandwidth between the client and server(s) (for different numbers of predicates).

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Published elsewhere. IEEE Security & Privacy 2022
Keywords
encrypted databases
Contact author(s)
edauterman @ berkeley edu
mayankr @ berkeley edu
History
2022-04-12: revised
2021-12-20: received
See all versions
Short URL
https://ia.cr/2021/1661
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2021/1661,
      author = {Emma Dauterman and Mayank Rathee and Raluca Ada Popa and Ion Stoica},
      title = {Waldo: A Private Time-Series Database from Function Secret Sharing},
      howpublished = {Cryptology {ePrint} Archive, Paper 2021/1661},
      year = {2021},
      url = {https://eprint.iacr.org/2021/1661}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.