[liberationtech] MIT Software Allows Queries On Encrypted Databases

[Michael Rogers]

On 20/12/11 07:26, Yosem Companys wrote:
> Sparrowvsrevolution writes/"CryptDB, a piece of database software that
> MIT researchers presented at the Symposium on Operating System
> Principles in October, allows users to send queries to an encrypted SQL
> database and get results without decrypting the stored information

Fascinating stuff. If we think of this as analogous to PGP, ie it
encrypts the data but doesn't conceal who's sending or receiving it,
then could the DBA perform something analogous to traffic analysis?

For example, if the database stores a social networking site, Alice will
look up database rows corresponding to her friends, and Bob will look up
rows corresponding to his friends. If there's a row they both look up,
the DBA can infer that they have a mutual friend.

So would it be possible to imagine a system analogous to Tor that would
conceal who was performing the queries, as well as the content of the
queries?

Cheers,
Michael
_______________________________________________
liberationtech mailing list
liberationtech at lists.stanford.edu

Should you need to change your subscription options, please go to:

https://mailman.stanford.edu/mailman/listinfo/liberationtech

If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?"

You will need the user name and password you receive from the list moderator in monthly reminders.

Should you need immediate assistance, please contact the list moderator.

Please don't forget to follow us on http://twitter.com/#!/Liberationtech

----- End forwarded message -----
-- 
Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE