Exploring vulnerabilities and mitigation strategies in encrypted databases.
-
Updated
Dec 6, 2024 - TeX
Exploring vulnerabilities and mitigation strategies in encrypted databases.
Browser-based encrypted-database leakage demo — deterministic, order-preserving, and randomized ciphertexts side by side, with frequency-matching and sorting attacks scored cell by cell against the truth. The randomized control is put through the same query and the same attack, and the verdict is computed from what they measure.
AES-GCM for PostgreSQL as a C extension (pg_gcm): AES-256/192/128 selected by key length, with server-side LIKE on the decrypted value. Planning stage.
AES-GCM for MySQL 8.0+ as a server component — AES-256 by default, AES-192 and AES-128 selected by key length behind gcm.min_key_bytes. Keeps server-side LIKE on the encrypted plaintext; deterministic variant for joins and UNIQUE; CBC dual-read for migration.
To associate your repository with the deterministic-encryption topic, visit your repo's landing page and select "manage topics."