MrCrypt: static analysis for secure cloud computations

Authors:
Sai Deep Tetali;Mohsen Lesani;Rupak Majumdar;Todd Millstein
Affiliations:
University of California, Los Angeles, Los Angeles, CA, USA;University of California, Los Angeles, Los Angeles, CA, USA;Max Planck Institute for Software Systems, Kaiserslautern, Germany;University of California, Los Angeles, Los Angeles, CA, USA
Venue:
Proceedings of the 2013 ACM SIGPLAN international conference on Object oriented programming systems languages & applications
Year:
2013

Citing 36
Cited 0

A syntactic approach to type soundness

Information and Computation
The Design of Rijndael

The Design of Rijndael
Authenticated encryption in SSH: provably fixing the SSH binary packet protocol

Proceedings of the 9th ACM conference on Computer and communications security
Extended Notions of Security for Multicast Public Key Cryptosystems

ICALP '00 Proceedings of the 27th International Colloquium on Automata, Languages and Programming
Description of a New Variable-Length Key, 64-bit Block Cipher (Blowfish)

Fast Software Encryption, Cambridge Security Workshop
Non-Interactive CryptoComputing For NC1

FOCS '99 Proceedings of the 40th Annual Symposium on Foundations of Computer Science
Trust in the λ-calculus

Journal of Functional Programming
E.cient Aggregation of encrypted data in Wireless Sensor Networks

MOBIQUITOUS '05 Proceedings of the The Second Annual International Conference on Mobile and Ubiquitous Systems: Networking and Services
Flow-insensitive type qualifiers

ACM Transactions on Programming Languages and Systems (TOPLAS)
Secure untrusted data repository (SUNDR)

OSDI'04 Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation - Volume 6
Answering aggregation queries in a secure system model

VLDB '07 Proceedings of the 33rd international conference on Very large data bases
Pig latin: a not-so-foreign language for data processing

Proceedings of the 2008 ACM SIGMOD international conference on Management of data
How to generate and exchange secrets

SFCS '86 Proceedings of the 27th Annual Symposium on Foundations of Computer Science
Order-Preserving Symmetric Encryption

EUROCRYPT '09 Proceedings of the 28th Annual International Conference on Advances in Cryptology: the Theory and Applications of Cryptographic Techniques
Fully homomorphic encryption using ideal lattices

Proceedings of the forty-first annual ACM symposium on Theory of computing
A comparison of approaches to large-scale data analysis

Proceedings of the 2009 ACM SIGMOD International Conference on Management of data
CLAMP: Practical Prevention of Large-Scale Data Leaks

SP '09 Proceedings of the 2009 30th IEEE Symposium on Security and Privacy
MapReduce: a flexible data processing tool

Communications of the ACM - Amir Pnueli: Ahead of His Time
Secure anonymous database search

Proceedings of the 2009 ACM workshop on Cloud computing security
Computing arbitrary functions of encrypted data

Communications of the ACM
Format-Preserving Encryption

Selected Areas in Cryptography
Public-key cryptosystems based on composite degree residuosity classes

EUROCRYPT'99 Proceedings of the 17th international conference on Theory and application of cryptographic techniques
Efficient receipt-free voting based on homomorphic encryption

EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques
Polyglot: an extensible compiler framework for Java

CC'03 Proceedings of the 12th international conference on Compiler construction
Airavat: security and privacy for MapReduce

NSDI'10 Proceedings of the 7th USENIX conference on Networked systems design and implementation
Depot: cloud storage with minimal trust

OSDI'10 Proceedings of the 9th USENIX conference on Operating systems design and implementation
AuraConf: a unified approach to authorization and confidentiality

Proceedings of the 7th ACM SIGPLAN workshop on Types in language design and implementation
Implementing Gentry's fully-homomorphic encryption scheme

EUROCRYPT'11 Proceedings of the 30th Annual international conference on Theory and applications of cryptographic techniques: advances in cryptology
Order-preserving encryption revisited: improved security analysis and alternative solutions

CRYPTO'11 Proceedings of the 31st annual conference on Advances in cryptology
CryptDB: protecting confidentiality with encrypted query processing

SOSP '11 Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles
Can homomorphic encryption be practical?

Proceedings of the 3rd ACM workshop on Cloud computing security workshop
Information-flow types for homomorphic encryptions

Proceedings of the 18th ACM conference on Computer and communications security
A public key cryptosystem and a signature scheme based on discrete logarithms

IEEE Transactions on Information Theory
Language-based information-flow security

IEEE Journal on Selected Areas in Communications
Information-Flow Control for Programming on Encrypted Data

CSF '12 Proceedings of the 2012 IEEE 25th Computer Security Foundations Symposium
Policy-sealed data: a new abstraction for building trusted cloud services

Security'12 Proceedings of the 21st USENIX conference on Security symposium

Quantified Score

Hi-index	0.00

Visualization

Abstract

In a common use case for cloud computing, clients upload data and computation to servers that are managed by a third-party infrastructure provider. We describe MrCrypt, a system that provides data confidentiality in this setting by executing client computations on encrypted data. MrCrypt statically analyzes a program to identify the set of operations on each input data column, in order to select an appropriate homomorphic encryption scheme for that column, and then transforms the program to operate over encrypted data. The encrypted data and transformed program are uploaded to the server and executed as usual, and the result of the computation is decrypted on the client side. We have implemented MrCrypt for Java and illustrate its practicality on three standard benchmark suites for the Hadoop MapReduce framework. We have also formalized the approach and proven several soundness and security guarantees.