Paper 2015/979 Original: eprint.iacr.org/2015/979 ↗
Guidelines for Using the CryptDB System Securely
Abstract
This report has two goals. First, we review guidelines for using the CryptDB system [PRZB11, Pop14] securely by the administrators of database applications. These guidelines were already described in [PRZB11] and elaborated on in [Pop14], but in light of some recent work [NKW15] that applied these guidelines incorrectly, a short document devoted to summarizing these guidelines may be useful. Second, we explain that the study of Naveed, Kamara, and Wright [NKW15] represents an unsafe usage of CryptDB, violating CryptDB’s security guidelines. Hence, the conclusions drawn in that paper regarding CryptDB’s guarantees for medical applications are incorrect: had the guidelines been followed, none of the claimed attacks would have been possible.
Metadata
- Available format(s)
PDF- Category
- Cryptographic protocols
- Publication info
- Preprint.
- History
- 2015-10-16: last updated
- 2015-10-12: published
- Short URL
- https://ia.cr/2015/979
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2015/979,
author = {Raluca Ada Popa and Nickolai Zeldovich and Hari Balakrishnan},
title = {Guidelines for Using the CryptDB System Securely},
howpublished = {Cryptology {ePrint} Archive, Paper 2015/979},
year = {2015},
url = {https://eprint.iacr.org/2015/979}
}