Deterministic and Efficiently Searchable Encryption

We present as-strong-as-possible definitions of privacy, and constructions achieving them, for public-key encryption schemes where the encryption algorithm is deterministic. We obtain as a consequence database encryption methods that permit fast (i.e. sub-linear, and in fact logarithmic, time) search while provably providing privacy that is as strong as possible subject to this fast search constraint. One of our constructs, called RSA-DOAEP, has the added feature of being length preserving, so that it is the first example of a public-key cipher. We generalize this to obtain a notion of efficiently-searchable encryption schemes which permit more flexible privacy to search-time trade-offs via a technique called bucketization. Our results answer muchasked questions in the database community and provide foundations for work done there.

• Type: Conference
• Year: 2007
• Where: CRYPTO
• Authors: Mihir Bellare, Alexandra Boldyreva, Adam O'Neill
• Keywords: Consequence Database Encryption, CRYPTO 2007, Cryptology, Encryption Schemes, Public-key Encryption Schemes