SWiSSSE: System-Wide Security for Searchable Symmetric Encryption
SWiSSSE: System-Wide Security for Searchable Symmetric Encryption
复制标题
DOI：
10.56553/popets-2024-0032
复制
发表时间：
2024-01
期刊：
影响因子：
--
通讯作者：
Zichen Gui;K. Paterson;Sikhar Patranabis;B. Warinschi
中科院分区：
文献类型：
--
作者：
Zichen Gui;K. Paterson;Sikhar Patranabis;B. Warinschi
本文为可搜索对称加密（SSE）方案的设计和分析开辟了一个新的方向。我们为SSE提供了第一个全面的安全模型和定义，它考虑了整个SSE系统的泄漏，不仅包括对加密索引的访问，还包括对加密数据库文档本身的访问。这种系统范围的泄漏是端到端SSE系统固有的，可以用来破坏几乎所有最先进的SSE方案（Gui等人，IEEE标准普尔2023）。然后，我们提供一个满足我们新的安全概念的静态SSE构造。所提出的SSE方案包含了一些新技术的组合：分段（bucket）以隐藏对查询的大量响应，以及延迟的伪随机回写（pseudo - random write-back）以破坏访问模式。我们对提议方案的实现和分析表明，它提供了非常强大的安全性，可以抵御一般类型的（系统范围内的）泄漏滥用攻击，开销适中。我们的方案可以平滑地扩展到包含数十万个文档和数百万个关键字-文档对的数据库。据我们所知，这是第一个端到端SSE方案，可以有效地抑制系统范围内的泄漏，同时保持实际效率。
This paper initiates a new direction in the design and analysis of searchable symmetric encryption (SSE) schemes. We provide the first comprehensive security model and definition for SSE that takes into account leakage from the entirety of the SSE system, including not only from access to encrypted indices but also from access to the encrypted database documents themselves. Such system-wide leakage is intrinsic in end-to-end SSE systems, and can be used to break almost all state-of-the-art SSE schemes (Gui et al., IEEE S&P 2023). We then provide a static SSE construction meeting our new security notion. The proposed SSE scheme involves a combination of novel techniques: bucketization to hide volumes of responses to queries, and delayed, pseudorandom write-backs to disrupt access pattern. Our implementation and analysis of the proposed scheme demonstrates that it offers very strong security against general classes of (system-wide) leakage-abuse attacks with moderate overhead. Our scheme scales smoothly to databases containing hundreds of thousand of documents and millions of keyword-document pairs. To the best of our knowledge, this is the first end-to-end SSE scheme that effectively suppresses system-wide leakage while maintaining practical efficiency.