EncodeORE: Reducing Leakage and Preserving Practicality in Order-Revealing Encryption
EncodeORE: Reducing Leakage and Preserving Practicality in Order-Revealing Encryption
复制标题
DOI：
10.1109/tdsc.2020.3029845
复制
发表时间：
2020-10
影响因子：
7.3
通讯作者：
Zheli Liu;Jin Li;Siyi Lv;Yanyu Huang;Liang Guo;Yali Yuan;Changyu Dong
中科院分区：
文献类型：
--
作者：
Zheli Liu;Jin Li;Siyi Lv;Yanyu Huang;Liang Guo;Yali Yuan;Changyu Dong
保序加密（OPE）是一种保持明文顺序的加密原语。在过去的几年中，许多OPE方案被提出来解决在加密数据库中执行范围查询的问题。然而，OPE泄漏了一些特定的信息（例如密文的顺序），因此容易受到许多攻击。随后，Boneh等人（Eurocrypt 2015）提出了顺序揭示加密（ORE），作为顺序保持加密的推广。它突破了OPE明文的数字顺序限制。它通过一个公开可计算的比较函数实现了对任何特定形式的明文的密文比较。在这篇文章中，我们的目标是设计一个新的ORE方案，减少泄漏，并保持在密文长度和加密时间的实用性。我们首先提出了混合模型HybridORE。然后，我们提出了一个改进的方案命名为EncodeORE，达到可接受的安全性和适当的密文长度。它们都探索了将明文分成不同的部分进行编码的编码策略，并根据每一部分的安全特性，采用合适的ORE算法来减少泄漏。与大域中的典型CLWW方案（FSE 2016）和Lewi-Wu（CCS 2016）相比，它们具有更少的泄漏。实验表明，该编码器具有很好的实用性。
Order-preserving encryption (OPE) is a cryptographic primitive that preserves the order of plaintexts. In the past few years, many OPE schemes were proposed to solve the problem of executing range queries in encrypted databases. However, OPE leaks some certain information (for example, the order of ciphertext), so it is vulnerable to many attacks. Subsequently, order-revealing encryption (ORE) was proposed by Boneh et al. (Eurocrypt 2015) as a generalization of order-preserving encryption. It breaks through the limitation of the numeric order of OPE plaintext. It implements ciphertext comparison for any specific form of plaintext through a publicly computable comparison function. In this article, we aim to design a new ORE scheme which reduces the leakages and preserves the practicality in terms of ciphertext length and encryption time. We first propose the hybrid model named HybridORE. Then, we propose an improved scheme named EncodeORE which achieves acceptable security and appropriate ciphertext length. They both explore the encode strategy of encoding plaintext into different parts and apply suitable ORE algorithms to each part according to its security characteristics to reduce leakages. Compared with the typical CLWW scheme (FSE 2016) and Lewi-Wu (CCS 2016) in large domain, they have fewer leakages. The experiment shows that the proposed EncodeORE is very practical.