Lightning talk introducing the idea of off-loading encryption to a trusted component.

1. DB vs. encryption

2. credit card numbers

3. credit card numbers
(or anything sensitive)

4. full-disk encryption
●
●
●
●
pgcrypto

5. full-disk encryption
● data-at-rest protection (theft of device)
● SQL injection
● filesystem-level access
● evil DBA
pgcrypto

6. full-disk encryption
● data-at-rest protection (theft of device)
● SQL injection
● filesystem-level access
● evil DBA
pgcrypto
● data-in-flight protection
● easy to leak key into logs / monitoring systems

7. application-level encryption

8. application
(encrypt + decrypt)
database

9. can't compare / hash values
=> no indexing, aggregation, ...

10. can't compare / hash values
=> no indexing, aggregation, ...
(a lot of processing moves to app)

11. So what can we do about it?

12. application
(encrypt + decrypt)
database

13. application
(encrypt + decrypt)
database
crypto
(compare)

14. application
(encrypt + decrypt)
database
crypto
(compare)
compare(A,B)

15. application
(encrypt + decrypt)
database
crypto
(compare)
compare(A,B)
-1/0/1

16. application
(encrypt + decrypt)
database
● CREATE INDEX
● GROUP BY
● WHERE
crypto
(compare)

17. host B
host C
application
(encrypt + decrypt)
database
● CREATE INDEX
● GROUP BY
● WHERE
crypto
(compare)
host A
TCP

18. host B
TrustZone / SGX
HSM / usbarmory
application
(encrypt + decrypt)
database
● CREATE INDEX
● GROUP BY
● WHERE
crypto
(compare)
host A
IPC

19. https://github.com/tvondra/ccnumber
● PoC / ugly prototype
● custom encrypted data type
● trusted component (comparator)
● communication over TCP/IP