CRUST: Cryptographic Remote Untrusted Storage without Public Keys
Published 1 September 2007
Erel Geron, Avishai Wool
Citations19
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
Abstract
This paper presents CRUST, a stackablefile system layer designed to provide secure file sharing over remote untrusted storage systems. CRUST is intended to be layered over insecure network file systems without changing the existing systems. In our approach, data at rest is kept encrypted, and data integrity and access control are provided by cryptographic means. Our design completely avoids public-key cryptography operations and uses more efficient symmetric-key alternatives to achieve improved performance. As a generic and self-contained system, CRUST includes its own in-band key distribution mechanism and does not rely on any special capabilities of the server or the clients. We have implemented CRUST as a Linux file system and shown that it performs comparably with typical underlying file systems, while providing significantly stronger security.
Keywords
Computer Science
Communications of the ACMHow to share a secret
13,453 Citations1979Adi Shamir
This technique enables the construction of robust key management schemes for cryptographic systems that can function securely and reliably even when misfortunes destroy half the pieces and security breaches expose all but one of the remaining pieces.
Lecture notes in computer scienceIdentity-Based Encryption from the Weil Pairing
6,986 Citations2001Dan Boneh, Matthew Franklin
This work proposes a fully functional identity-based encryption scheme (IBE) based on the Weil pairing that has chosen ciphertext security in the random oracle model assuming an elliptic curve variant of the computational Diffie-Hellman problem.
Lecture notes in computer scienceNon-Interactive and Information-Theoretic Secure Verifiable Secret Sharing
2,352 Citations2007Torben Pryds Pedersen
It is shown how to distribute a secret to n persons such that each person can verify that he has received correct information about the secret without talking with other persons.
HMAC: Keyed-Hashing for Message Authentication
1,977 Citations1997Hugo Krawczyk, Mihir Bellare +1 more
This document describes HMAC, a mechanism for message authentication using cryptographic hash functions that can be used with any iterative cryptographic hash function, e.g., MD5, SHA-1, in combination with a secret shared key.
A practical scheme for non-interactive verifiable secret sharing
1,078 Citations1987Paul Feldman
This paper presents an extremely efficient, non-interactive protocol for verifiable secret sharing, which provides asynchronous networks with a constant-round simulation of simultaneous broadcast networks whenever even a bare majority of processors are good.
Kerberos: An Authentication Service for Open Network Systems
1,026 Citations1988Jennifer G. Steiner, Athena +2 more
OceanStore
868 Citations2000John Kubiatowicz, David Bindel +10 more
Lecture notes in computer scienceSecure Distributed Key Generation for Discrete-Log Based Cryptosystems
521 Citations1999Rosario Gennaro, Stanisław Jarecki +2 more
SiRiUS: Securing Remote Untrusted Storage.
451 Citations2003Eu-Jin Goh, Hovav Shacham +2 more
This paper presents SiRiUS, a secure file system designed to be layered over insecure network and P2P file systems such as NFS, CIFS, OceanStore, and Yahoo! Briefcase that contains a novel method of performing file random access in a cryptographic file system without the use of a block server.
A cryptographic file system for UNIX
415 Citations1993Matt Blaze
Encryption techniques for file system-level encryption are described, and general issues of cryptographic system interfaces to support routine secure computing are discussed.
Secure Untrusted Data Repository (SUNDR)
404 Citations2003Jinyuan Li, Maxwell Krohn +2 more
SUNDR's protocol achieves a property called fork consistency, which guarantees that clients can detect any integrity or consistency failures as long as they see each other's file modifications.
Separating key management from file system security
335 Citations1999David Mazières, Michael Kaminsky +2 more
SFS is presented, a secure file system that avoids internal key management, and its file names effectively contain public keys, making them self-certifying pathnames, which make SFS more versatile than any file system with built-in key management.
Farsite
290 Citations2002Atul Adya, Roger Wattenhofer +8 more
USENIX SummerVnodes: An Architecture for Multiple File System Types in Sun UNIX.
260 Citations1986Steve Kleiman
All file system operations should be atomic, so that there is no need for locking (hard locking, not user advisory locking) across several operations.
ACM Transactions on Computer SystemsFile-system development with stackable layers
202 Citations1994John Heidemann, Gerald J. Popek
By lowering barriers to new filing design, stackable layering offers the potential of broad third-party file-system development not feasible today.
A framework for evaluating storage system security
180 Citations2002Erik Riedel, Mahesh Kallahalla +1 more
Columbia Academic Commons (Columbia University)Cryptfs: A Stackable Vnode Level Encryption File System
137 Citations1998Ion Badulescu, Alex Shender +1 more
This paper describes the design and implementation of Cryptfs — a file system that was designed as a stackable Vnode layer loadable kernel module that offers stronger security by basing its keys on process session IDs as well as user IDs, and by the fact that kernel memory is harder to access.
Strong security for network-attached storage
131 Citations2002Ethan L. Miller, Darrell D. E. Long +2 more
NCryptfs: A Secure and Convenient Cryptographic File System
130 Citations2003Charles P. Wright, Michael C. Martino +1 more
Lecture notes in computer scienceSecret-Key Agreement without Public-Key Cryptography
117 Citations2007Tom Leighton, Silvio Micali
Novel approaches to secret-key agreement are described, not based on public-key cryptography nor number theory, which are extremely efficient implemented in software or make use of very simple uuexpensive hardware.
Securing distributed storage
106 Citations2005Vishal Kher, Yongdae Kim
This paper discusses important security issues related to storage and presents a comprehensive survey of the security services provided by the existing storage systems, covering a broad range of the storage security literature.
Verifiable secret redistribution for archive systems
75 Citations2003Theodore M. Wong, Chenxi Wang +1 more
A new verifiable secret redistribution protocol for threshold sharing schemes that forms a key component of a proposed archival storage system that enables the dynamic addition or removal of shareholders, and also guards against mobile adversaries.
eScholarship (California Digital Library)POTSHARDS: secure long-term storage without encryption
67 Citations2007Mark W. Storer, Kevin M. Greenan +2 more
POTSHARDS is an archival storage system that provides long-term security for data with very long lifetimes without using encryption, and uses a new technique, approximate pointers, in conjunction with secure distributed RAID techniques to provide availability and reliability across independent archives.
Scholarworks (University of Massachusetts Amherst)Key Regression: Enabling Efficient Key Distribution for Secure Distributed Storage.
65 Citations2005Kevin Fu, Seny Kamara +1 more
Don't trust your file server
58 Citations2005D. Mazires, Dennis Shasha
SUNDR servers can safely be managed by people who have no permission to read or write data stored in the file system, and attackers will no longer be able to wreak havoc by compromising servers and tampering with data.
Security for Network Attached Storage Devices
56 Citations1997Howard Gobioff, Garth A. Gibson +1 more
This paper presents a novel cryptographic capability system addressing the security and performance needs of network attached storage systems in which file management functions occur at a different location than the file storage device.
An extended verifiable secret redistribution protocol for archival systems
22 Citations2006V.H. Gupta, K. Gopinath
An existing protocol for archival systems is extended to take care of more realistic situations, and it is assumed that the recipients of the secret shares are all trustworthy; this is relaxed by requiring that only a majority is trustworthy.
Toward securing untrusted storage without public-key operations
19 Citations2005Dalit Naor, Amir Shenhav +1 more
This paper examines design alternatives that avoid public-key cryptography operations to achieve better performance and presents the trade-offs and limitations that are introduced by these substitutions.
arXiv (Cornell University)Securing Data in Storage: A Review of Current Research
14 Citations2004Paul Stanton
A survey of techniques for securely storing data, including theoretical approaches, prototype systems, and existing systems currently available, is presented, to provide a foundation for making an informed decision.