Leakage-Abuse Attacks Against Structured Encryption for SQL

ePrint Report: Leakage-Abuse Attacks Against Structured Encryption for SQL

Alexander Hoover, Ruth Ng, Daren Khu, Yao'an Li, Joelle Lim, Derrick Ng, Jed Lim, Yiyang Song

Structured Encryption (StE) enables a client to securely store and query data stored on an untrusted server. Recent constructions of StE have moved beyond basic queries, and now support large subsets of SQL. However, the security of these constructions is poorly understood, and no systematic analysis has been performed.


We address this by providing the …

abuse attacks basic beyond client data encryption eprint report query report server song sql store untrusted