michwill

148 karma · joined May 6, 2013

michwillon ZeroDB, an end-to-end encrypted database

Sure. Will keep in touch!

michwillon ZeroDB, an end-to-end encrypted database

Re-read their paper about mOPE. Very similar indeed. The difference is that in our case the server doesn't know the tree structure, with cryptdb it does.

michwillon ZeroDB, an end-to-end encrypted database

Appications should be architected so that security-critical logic happens on the client. See how Mega and SpiderOak do that. This way, the attacker has to hack every computer of every client instead of one single server.

Of course, this requires making sure that the code which the client executes is not malicious

michwillon ZeroDB, an end-to-end encrypted database

Seems somewhat similar. Though seems like they use deterministic encryption (like AES with same IV), we don't have to do that.

michwillon ZeroDB, an end-to-end encrypted database

Yes, interesting. I wonder how did they implement search over there

michwillon ZeroDB, an end-to-end encrypted database

Ops, I thought I'm responding here.

The server actually knows which pieces of B-Trees you access. But no more than that.

michwillon ZeroDB, an end-to-end encrypted database

The server knows which pieces of the trees are you reading. That's all it knows.

michwillon ZeroDB, an end-to-end encrypted database

Seems to be similar to ORAM, that's right. And practical enough to be implemented: fulltext search query to aws takes about 0.5 s (not slowing down when multiple clients do these queries in parallel)

michwillon ZeroDB, an end-to-end encrypted database

Your [pretty long] passphrase can be your key. Or you can take your key file with you.

Having the key derived from your password is also possible, but I think not really that secure.

SpiderOak and Mega deal with this problem as they have e2e encrypted file storage

michwillon ZeroDB, an end-to-end encrypted database

We support client-side search, that' the whole point. But we don't even have to download all the index, only log(index_size)

michwillon ZeroDB, an end-to-end encrypted database

Thanks a lot for the hints! :-)

michwillon ZeroDB, an end-to-end encrypted database

You've probably seen CryptDB from MIT. They make it possible to do certain types of queries (range etc) by making security compromises (giving some clues to hack encryption).

We don't make such compromises (zero compromises, yes!). The way we do it is to actually traverse encrypted b-trees from the client, while b-trees are on the server. So, we pretty much split it between client and server at the lowest level of how db operates

michwillon ZeroDB, an end-to-end encrypted database

To be precise, when you dataset is large, you fetch about log(index_size)

michwillon ZeroDB, an end-to-end encrypted database

No, you don't fetch them all. In fact, we tested search over encrypted archives of linux kernel mailing list w/o downloading that :-)

michwillon ZeroDB, an end-to-end encrypted database

The use-cases could be, for example, payment processors storing customer data, encrypted webmail (where you're able to search w/o downloading all your emails), "encrypted evernote" :-)

Yes, it will be open source once available

michwillon ZeroDB, an end-to-end encrypted database

No. It is possible to do it without HE! Full HE is 10^12 slower than normal computations, so impractical yet.

In our case, the actual computations are done on the client

michwillon ZeroDB, an end-to-end encrypted database

We will release it open source once it's ready to be used, together with a whitepaper. Which, I hope, will happen pretty soon!

michwillon How does Amazon's Whispersync for Voice work?

Oops, the question wasn't actually formed as a question, so I ask in the comment.

Amazon (+Audible) has made it possible to sync audiobooks with ebooks. 24k of "whispersync-capable" books are now available.

Does anybody know if they do this alignment by hand (during the recording, for example)?

Did many people want to use this feature?