Globally, 8.1 billion people exist, and among them, 5.44 billion are active Internet users that is 67.1% of global population handling vast amounts of sensitive data. This data is often structured and requires encryption. Traditional database encryption algorithms modify the format and length of the structured data, resulting in differences in size, format, and data type between the original and encrypted fields. Such modifications are particularly problematic for indexed fields, necessitating additional handling and changes in the schema of the existing table. Format-Preserving Encryption (FPE) retains the original data type and format post-encryption. This paper proposes an AES-based FPE for structured data types on the cloud. AES-GCM (Advanced Encryption Standard - Galois/Counter Mode) is a widely-used encryption method in cloud environments, combining high security with efficiency. It offers both data confidentiality and integrity, by encrypting data while also generating an authentication tag to ensure data hasn't been altered. AES-GCM's parallelizability makes it highly performant, and its non-deterministic nature, achieved through unique initialization vectors (IVs), ensures strong protection against replay attacks. It's particularly favored in cloud storage and communications for its balance of security and speed.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Enhancing Cloud Security for Structured Data: An AES-GCM Based Format-Preserving Encryption Approach

  • S. Vidhya

摘要

Globally, 8.1 billion people exist, and among them, 5.44 billion are active Internet users that is 67.1% of global population handling vast amounts of sensitive data. This data is often structured and requires encryption. Traditional database encryption algorithms modify the format and length of the structured data, resulting in differences in size, format, and data type between the original and encrypted fields. Such modifications are particularly problematic for indexed fields, necessitating additional handling and changes in the schema of the existing table. Format-Preserving Encryption (FPE) retains the original data type and format post-encryption. This paper proposes an AES-based FPE for structured data types on the cloud. AES-GCM (Advanced Encryption Standard - Galois/Counter Mode) is a widely-used encryption method in cloud environments, combining high security with efficiency. It offers both data confidentiality and integrity, by encrypting data while also generating an authentication tag to ensure data hasn't been altered. AES-GCM's parallelizability makes it highly performant, and its non-deterministic nature, achieved through unique initialization vectors (IVs), ensures strong protection against replay attacks. It's particularly favored in cloud storage and communications for its balance of security and speed.