- Introduction
- Requirements
- Installation
- Configuration
- Compiling
- Usage
- Redo Experiment
- Maintainers
EncKV is an encrypted key-value store with secure rich query support. It stores encrypted data records with multiple secondary attributes in the form of encrypted key-value pairs. EncKV leverages the latest practical primitives for search over encrypted data, i.e., searchable symmetric encryption and order-revealing encryption, and provides encrypted indexes with guaranteed security respectively to enable exactmatch and range-match queries via secondary attributes of data records. EncKV carefully integrates the above indexes into a distributed index framework to facilitate secure query processing in parallel. To mitigate recent inference attacks on encrypted database systems, EncKV protects the order information during range queries, and presents an interactive batch query mechanism to further hide the associations across data values on different attributes.
We implement the EncKV prototype on a Redis cluster, and conduct performance evaluation on Amazon Cloud. The results show that EncKV preserves the efficiency and scalability of plaintext distributed key-value stores.
Xingliang Yuan, Yu Guo, Xinyu Wang, Cong Wang, Baochun Li, and Xiaohua Jia, "EncKV: An Encrypted Key-value Store with Rich Queries", In the 12th ACM Asia Conference on Computer and Communications Security (AISACCS'17).
Recommended Environment: Ubuntu 16.04 LTS with gcc version 4.8.4.
This software requires the following libraries:
- OpenSSL (https://www.openssl.org/source/openssl-1.0.2a.tar.gz)
- Thrift (http://archive.apache.org/dist/thrift/0.9.2/)
- boost C++ library (http://sourceforge.net/projects/boost/files/boost/1.58.0/boost_1_58_0.tar.gz)
- Redis (http://download.redis.io/releases/redis-3.2.0.tar.gz)
- Redis3m (https://github.com/luca3m/redis3m)
Environment setup:
* apt-get update
* apt-get install gcc g++ libssl-dev libgmp-dev make cmake libboost-dev libboost-test-dev libboost-program-options-dev libboost-system-dev libboost-filesystem-dev libevent-dev automake libtool flex bison pkg-config libglib2.0-dev git
* apt-get install libmsgpack-dev libboost-thread-dev libboost-date-time-dev libboost-test-dev libboost-filesystem-dev libboost-system-dev libhiredis-dev cmake build-essential libboost-regex-devThrift installation:
You can find the latest HTTP link on https://thrift.apache.org/
* wget http://archive.apache.org/dist/thrift/0.9.2/thrift-0.9.2.tar.gz
* tar zxvf thrift-0.9.2.tar.gz
* cd thrift-0.9.2
* ./configure
* make
* make installRedis installation:
* wget http://download.redis.io/releases/redis-3.2.0.tar.gz
* tar zxvf redis-3.2.0.tar.gz
* cd redis-3.2.0
* make
* make installredis3m (a C++ Redis client) installation:
* git clone https://github.com/luca3m/redis3m
* cd redis3m
* cmake .
* make
* make install-
Configure the Redis
Start the redis server listening on port 6379.
* redis-server &
-
Configure the environment
Add the libraries paths to $LD_LIBRARY_PATH.
* export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/lib
-
Configure IPs and Ports
Input IP and PORT of each machine to an configuration file in /BlindDB/src/Client/DemoConfig.h
#define DEMO_SECURITY_KEY "adfaksdfjklasdjflajsdiofjasodf" const std::string kDemoServerIP[] = { "10.4.0.5", "10.4.0.6", "10.4.0.9", "10.4.0.10", "10.4.0.11", "10.4.0.12", "10.4.0.13", "10.4.0.14", "10.4.0.15", "10.4.0.16" }; const uint16_t kDemoServerPort[] = { 9090, 9090, 9090, 9090, 9090, 9090, 9090, 9090, 9090, 9090 }; const uint16_t kRedisPort[] = { 6379, 6379, 6379, 6379, 6379, 6379, 6379, 6379, 6379, 6379 };
Compile EncKV:
* git clone https://github.com/CongGroup/ASIACCS-17.git
* cd ASIACCS-17
* make-
Test_insert
Scripts that insert test data into EncKV.
Usage : ASIACCS-17/Client/Test_insert [DataNodeNum] [BegNum] [EndNum] [EqualIndexVersion] [OrderIndex] [BlockSizeInBit] [ModNum] - [DataNodeNum]: the number of nodes. - [BegNum]: the begin of random insertion number. - [EndNum]: the End of random insertion number. - [EqualIndexVersion]: 0 means NO index, 1 means strategy I equal index, 2 means strategy II equal index, 3 means plaintext equal index. - [OrderIndex]: 0 means NO index, 1 means encrypted order index, 2 means plaintext order index. - [BlockSizeInBit]: the blocksize of ORE in bit. - [ModNum]: This param is to insert multiple records with a same value. 0 means no mod operation, for others, the insertion value will mod this param. -
Test_Throughput.sh
Scripts that evaluate throughput of EncKV.
Usage : ASIACCS-17/Client/Test_Throughput.sh [NodeNum] [LOOP] [OPTION] [TIME] [MaxBoundary] [SEEDS] [BLOCK_SIZE_INBITS] - [NodeNum]: the number of nodes. - [LOOP]: the number of clients. - [OPTION]: 0 means use strategy I index, 1 means use strategy II index, 2 means use encrypted order index. - [TIME]: time duration for the throughput test. - [MaxBoundary]: the boundary of generated data. - [SEEDS]: random seed for generating test data. - [BlockSizeInBit]: the blocksize of ORE in bit. -
Test_latency
Test the latency of each operations
Usage : ASIACCS-17/Client/Test_latency [DataNodeNum] [BegNum] [EndNum] [Times] [QueryIndexType] [BlockSizeInBit] - [DataNodeNum]: the number of nodes. - [BegNum]: the begin of random insertion number. - [EndNum]: the End of random insertion number. - [ValLen]: the length of value in bytes. - [Times]: times of operations. - [QueryIndexType]: 0 means use strategy I, 1 means use strategy II, 2 means use encrypted order index, 3 means use plaintext equal index, 4 means use plaintext order index. - [BlockSizeInBit]: the blocksize of ORE in bit.
-
You can follow these steps to redo our experiment.
-
Figure A
./Test_insert 9 0 1000 2 0 8 0 ./Test_insert 9 0 2000 2 0 8 0 ./Test_insert 9 0 4000 2 0 8 0 ./Test_insert 9 0 8000 2 0 8 0 ./Test_insert 9 0 16000 2 0 8 0 -
Figure B
./Test_insert 9 0 1000 0 1 8 0 ./Test_insert 9 0 2000 0 1 8 0 ./Test_insert 9 0 4000 0 1 8 0 ./Test_insert 9 0 8000 0 1 8 0 ./Test_insert 9 0 16000 0 1 8 0 -
Figure C
./Test_insert 3 0 10000 2 0 8 0 ./Test_Throughput.sh 3 40 1 time 1 seed 8 （redis-cli flushall) ./Test_insert 6 0 10000 2 0 8 0 ./Test_Throughput.sh 6 40 1 time 1 seed 8 （redis-cli flushall) ./Test_insert 9 0 10000 2 0 8 0 ./Test_Throughput.sh 9 40 1 time 1 seed 8 -
Figure D
./Test_insert 3 0 10000 0 1 8 0 ./Test_Throughput.sh 3 40 2 time 1 seed 8 （redis-cli flushall) ./Test_insert 6 0 10000 0 1 8 0 ./Test_Throughput.sh 6 40 2 time 1 seed 8 （redis-cli flushall) ./Test_insert 9 0 10000 0 1 8 0 ./Test_Throughput.sh 9 40 2 time 1 seed 8 -
Figure E
./Test_insert 9 -2000 0 2 0 8 0 ./Test_insert 9 -4000 0 2 0 8 0 ./Test_insert 9 -8000 0 2 0 8 0 ./Test_insert 9 -16000 0 2 0 8 0 ./Test_insert 9 -32000 0 2 0 8 0 (when the BegNum is below zero, this command will insert the abs(BegNum) in abs(BegNum) times.) -
Figure F
(YWWQL16) ./Test_insert 9 -2000 0 1 0 8 0 ./Test_insert 9 -4000 0 1 0 8 0 ./Test_insert 9 -8000 0 1 0 8 0 ./Test_insert 9 -16000 0 1 0 8 0 ./Test_insert 9 -32000 0 1 0 8 0 ./Test_latency 9 2000 2000 10 0 8 ./Test_latency 9 4000 4000 10 0 8 ./Test_latency 9 8000 8000 10 0 8 ./Test_latency 9 16000 16000 10 0 8 ./Test_latency 9 32000 32000 10 0 8 (Ext) ./Test_insert 9 -2000 0 2 0 8 0 ./Test_insert 9 -4000 0 2 0 8 0 ./Test_insert 9 -8000 0 2 0 8 0 ./Test_insert 9 -16000 0 2 0 8 0 ./Test_insert 9 -32000 0 2 0 8 0 ./Test_latency 9 2000 2000 10 1 8 ./Test_latency 9 4000 4000 10 1 8 ./Test_latency 9 8000 8000 10 1 8 ./Test_latency 9 16000 16000 10 1 8 ./Test_latency 9 32000 32000 10 1 8 -
Figure G
./Test_insert 9 -2000 0 0 1 8 0 ./Test_latency 9 2000 2000 10 2 8 （redis-cli flushall) ./Test_insert 9 -4000 0 0 1 8 0 ./Test_latency 9 4000 4000 10 2 8 （redis-cli flushall) ./Test_insert 9 -8000 0 0 1 8 0 ./Test_latency 9 8000 8000 10 2 8 （redis-cli flushall) ./Test_insert 9 -16000 0 0 1 8 0 ./Test_latency 9 16000 16000 10 2 8 （redis-cli flushall) ./Test_insert 9 -32000 0 0 1 8 0 ./Test_latency 9 32000 32000 10 2 8 -
Figure H
(No Index) ./Test_insert 9 0 1000 0 0 8 0 ./Test_insert 9 0 2000 0 0 8 0 ./Test_insert 9 0 4000 0 0 8 0 ./Test_insert 9 0 8000 0 0 8 0 ./Test_insert 9 0 16000 0 0 8 0 (Ext Index) ./Test_insert 9 0 1000 2 0 8 0 ./Test_insert 9 0 2000 2 0 8 0 ./Test_insert 9 0 4000 2 0 8 0 ./Test_insert 9 0 8000 2 0 8 0 ./Test_insert 9 0 16000 2 0 8 0 (Rng Index) ./Test_insert 9 0 1000 0 1 8 0 ./Test_insert 9 0 2000 0 1 8 0 ./Test_insert 9 0 4000 0 1 8 0 ./Test_insert 9 0 8000 0 1 8 0 ./Test_insert 9 0 16000 0 1 8 0
- Xinyu Wang, City University of Hong Kong, [email protected]
- Xingliang Yuan, City University of Hong Kong, [email protected]
- Mengyu Yao, City University of Hong Kong, [email protected]
- Yu Guo, City University of Hong Kong, [email protected]