Manipulating Data while It Is Encrypted

《Manipulating Data while It Is Encrypted》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、ManipulatingDatawhileItIsEncryptedCraigGentryIBMWatsonLatticeCryptoDay,May2010TheGoalAwaytodelegateprocessingofmydata,withoutgivingawayaccesstoit.Application:PrivateGoogleSearchIwanttodelegateprocessingofmydata,withoutgivingawayaccesstoit.DoaprivateGoo

2、glesearchYouencryptyourquery,sothatGooglecannot“see”itSomehowGoogleprocessesyourencryptedqueryYougetanencryptedresponse,anddecryptitApplication:CloudComputingIwanttodelegateprocessingofmydata,withoutgivingawayaccesstoit.YoustoreyourfilesonthecloudE

3、ncryptthemtoprotectyourinformationLater,youwanttoretrievefilescontaining“cloud”within5wordsof“computing”.Cloudshouldreturnonlythese(encrypted)files,withoutknowingthekeyPrivacycombo:EncryptedqueryonencrypteddataOutlineFullyhomomorphicencryption(FHE)a

4、tahighlevelAconstructionKnownAttacksPerformance/ImplementationCanweseparateprocessingfromaccess?Actually,separatingprocessingfromaccessevenmakessenseinthephysicalworld…AnAnalogy:Alice‟sJewelryStoreWorkersassemblerawmaterialsintojewelryButAliceiswor

5、riedabouttheftHowcantheworkersprocesstherawmaterialswithouthavingaccesstothem?AnAnalogy:Alice‟sJewelryStoreAliceputsmaterialsinlockedgloveboxForwhichonlyshehasthekeyWorkersassemblejewelryintheboxAliceunlocksboxtoget“results”AnEncryptionGlovebox?Ali

6、cedelegatedprocessingwithoutgivingawayaccess.Butdoesthisworkforencryption?Canwecreatean“encryptionglovebox”thatwouldallowthecloudtoprocessdatawhileitremainsencrypted?Public-keyEncryptionThreeprocedures:KeyGen,Enc,Dec(sk,pk)KeyGen(λ)Generaterandomp

7、ublic/secretkey-paircEnc(pk,m)EncryptamessagewiththepublickeymDec(sk,c)DecryptaciphertextwiththesecretkeyHomomorphicPublic-keyEncryptionAnotherprocedure:Eval(forEvaluate)cEval(pk,f,c1,…,ct)functionEncryptionsofinputsm,…,mtofEncryptionoff(m,…,m)

8、.1t1tI.e.,Dec(sk,c)=f(m,…m)1tNoinfoaboutm,…,m,f(m,…m)isleaked1t1tf(m,…m)isthe“ring”madefromraw1tmaterialsm1,…,mtinsidetheencryptionboxConceptduetoRivest,Adleman,Dertouzous(1978)FullyHomomorphicPublic-keyEncryptionAnotherproced