{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T17:32:46Z","timestamp":1783791166176,"version":"3.55.0"},"reference-count":50,"publisher":"Association for Computing Machinery (ACM)","issue":"8","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. VLDB Endow."],"published-print":{"date-parts":[[2020,4]]},"abstract":"<jats:p>In the past decade, cloud computing has emerged as an economical and practical alternative to in-house datacenters. But due to security concerns, many enterprises are still averse to adopting third party clouds. To mitigate these concerns, several authors have proposed to use partially homomorphic encryption (PHE) to achieve practical levels of confidentiality while enabling computations in the cloud. However, these approaches are either not performant or not versatile enough. We present two novel PHE schemes, an additive and a multiplicative homomorphic encryption scheme, which, unlike previous schemes, are symmetric. We prove the security of our schemes and show they are more efficient than state-of-the-art asymmetric PHE schemes, without compromising the expressiveness of homomorphic operations they support. The main intuition behind our schemes is to trade strict ciphertext compactness for good \"relative\" compactness in practice, while in turn reaping improved performance. We build a prototype system called Symmetria that uses our proposed schemes and demonstrate its performance improvements over previous work. Symmetria achieves up to 7\u00d7 average speedups on standard benchmarks compared to asymmetric PHE-based systems.<\/jats:p>","DOI":"10.14778\/3389133.3389144","type":"journal-article","created":{"date-parts":[[2020,5,4]],"date-time":"2020-05-04T19:28:19Z","timestamp":1588620499000},"page":"1290-1303","source":"Crossref","is-referenced-by-count":25,"title":["Efficient confidentiality-preserving data analytics over symmetrically encrypted datasets"],"prefix":"10.14778","volume":"13","author":[{"given":"Savvas","family":"Savvides","sequence":"first","affiliation":[{"name":"Purdue University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Darshika","family":"Khandelwal","sequence":"additional","affiliation":[{"name":"Universita della Svizzera italiana (USI)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"Eugster","sequence":"additional","affiliation":[{"name":"Universita della Svizzera italiana (USI)"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,5,3]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"6th Biennial Conference on Innovative Data Systems Research (CIDR'13)","author":"Arasu A.","year":"2013","unstructured":"A. Arasu , S. Blanas , K. Eguro , R. Kaushik , D. Kossmann , R. Ramamurthy , and R. Venkatesan . Orthogonal security with cipherbase . In 6th Biennial Conference on Innovative Data Systems Research (CIDR'13) , January 2013 . A. Arasu, S. Blanas, K. Eguro, R. Kaushik, D. Kossmann, R. Ramamurthy, and R. Venkatesan. Orthogonal security with cipherbase. In 6th Biennial Conference on Innovative Data Systems Research (CIDR'13), January 2013."},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/2723372.2742797"},{"key":"e_1_2_1_3_1","volume-title":"Nist special publication 800-57 part 1, revision 4","author":"Barker E.","year":"2016","unstructured":"E. Barker . Nist special publication 800-57 part 1, revision 4 , 2016 . E. Barker. Nist special publication 800-57 part 1, revision 4, 2016."},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-01001-9_13"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22792-9_33"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38980-1_7"},{"key":"e_1_2_1_7_1","volume-title":"Recommendations and key lengths, bsi technical guideline, bsi tr-02102-1","author":"SI.","year":"2019","unstructured":"B SI. Cryptographic methods : Recommendations and key lengths, bsi technical guideline, bsi tr-02102-1 , 2019 . BSI. Cryptographic methods: Recommendations and key lengths, bsi technical guideline, bsi tr-02102-1, 2019."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813700"},{"key":"e_1_2_1_9_1","unstructured":"Cloudera. A TPC-DS like benchmark for Cloudera Impala. https:\/\/github.com\/cloudera\/impala-tpcds-kit.  Cloudera. A TPC-DS like benchmark for Cloudera Impala. https:\/\/github.com\/cloudera\/impala-tpcds-kit."},{"key":"e_1_2_1_10_1","volume-title":"Algorithms, key size and protocols report, d5.4","author":"E.","year":"2018","unstructured":"E. CSA. Algorithms, key size and protocols report, d5.4 , 2018 . E. CSA. Algorithms, key size and protocols report, d5.4, 2018."},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44586-2_9"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1985.1057074"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2018.2877286"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21969-6_22"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.5555\/1325851.1325912"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1536414.1536440"},{"key":"e_1_2_1_17_1","volume-title":"Homomorphic evaluation of the AES circuit. IACR Cryptology ePrint Archive","author":"Gentry C.","year":"2012","unstructured":"C. Gentry , S. Halevi , and N. P. Smart . Homomorphic evaluation of the AES circuit. IACR Cryptology ePrint Archive , 2012 . Informal publication. C. Gentry, S. Halevi, and N. P. Smart. Homomorphic evaluation of the AES circuit. IACR Cryptology ePrint Archive, 2012. Informal publication."},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5220\/0006461202000211"},{"key":"e_1_2_1_19_1","unstructured":"Google. Encrypted bigquery client. https:\/\/github.com\/google\/encrypted-bigquery-client.  Google. Encrypted bigquery client. https:\/\/github.com\/google\/encrypted-bigquery-client."},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.44"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24571-1_10"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2998392.2998403"},{"key":"e_1_2_1_23_1","unstructured":"Intel. Intel 64 and ia-32 architectures optimization reference manual. https:\/\/software.intel.com\/en-us\/download\/intel-64-and-ia-32-architectures-optimization-reference-manual.  Intel. Intel 64 and ia-32 architectures optimization reference manual. https:\/\/software.intel.com\/en-us\/download\/intel-64-and-ia-32-architectures-optimization-reference-manual."},{"key":"e_1_2_1_24_1","volume-title":"Tensorscone: A secure tensor ow framework using intel sgx. arXiv preprint arXiv:1902.04413","author":"Kunkel R.","year":"2019","unstructured":"R. Kunkel , D. L. Quoc , F. Gregor , S. Arnautov , P. Bhatotia , and C. Fetzer . Tensorscone: A secure tensor ow framework using intel sgx. arXiv preprint arXiv:1902.04413 , 2019 . R. Kunkel, D. L. Quoc, F. Gregor, S. Arnautov, P. Bhatotia, and C. Fetzer. Tensorscone: A secure tensor ow framework using intel sgx. arXiv preprint arXiv:1902.04413, 2019."},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2203"},{"key":"e_1_2_1_26_1","volume-title":"Stream vbyte: Faster byte-oriented integer compression. CoRR, abs\/1709.08990","author":"Lemire D.","year":"2017","unstructured":"D. Lemire , N. Kurz , and C. Rupp . Stream vbyte: Faster byte-oriented integer compression. CoRR, abs\/1709.08990 , 2017 . D. Lemire, N. Kurz, and C. Rupp. Stream vbyte: Faster byte-oriented integer compression. CoRR, abs\/1709.08990, 2017."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2015.7113273"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3124441"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2488368"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/11805588_7"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813651"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/233551.233553"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48910-X_16"},{"key":"e_1_2_1_34_1","volume-title":"Symp. on Op. Sys. Design and Implementation (OSDI)","author":"Papadimitriou A.","year":"2016","unstructured":"A. Papadimitriou , R. Bhagwan , N. Chandran , R. Ramjee , A. Haeberlen , H. Singh , A. Modi , and S. Badrinarayanan . Big data analytics over encrypted datasets with seabed . In Symp. on Op. Sys. Design and Implementation (OSDI) , 2016 . A. Papadimitriou, R. Bhagwan, N. Chandran, R. Ramjee, A. Haeberlen, H. Singh, A. Modi, and S. Badrinarayanan. Big data analytics over encrypted datasets with seabed. In Symp. on Op. Sys. Design and Implementation (OSDI), 2016."},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.14778\/3342263.3342641"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2330667.2330691"},{"key":"e_1_2_1_37_1","first-page":"169","volume-title":"On data banks and privacy homomorphisms. Foundations of Secure Computation","author":"Rivest R. L.","year":"1978","unstructured":"R. L. Rivest , L. Adleman , and M. L. Dertouzos . On data banks and privacy homomorphisms. Foundations of Secure Computation , Academia Press , pages 169 -- 179 , 1978 . R. L. Rivest, L. Adleman, and M. L. Dertouzos. On data banks and privacy homomorphisms. Foundations of Secure Computation, Academia Press, pages 169--179, 1978."},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/359340.359342"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3127479.3129256"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.10"},{"key":"e_1_2_1_41_1","first-page":"44","volume-title":"Symp. on Security and Privacy (S&P)","author":"Song D. X.","year":"2000","unstructured":"D. X. Song , D. Wagner , and A. Perrig . Practical techniques for searches on encrypted data . In Symp. on Security and Privacy (S&P) , pages 44 -- 55 , 2000 . D. X. Song, D. Wagner, and A. Perrig. Practical techniques for searches on encrypted data. In Symp. on Security and Privacy (S&P), pages 44--55, 2000."},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516673"},{"key":"e_1_2_1_43_1","volume-title":"Towards practical oblivious ram. arXiv preprint arXiv:1106.3652","author":"Stefanov E.","year":"2011","unstructured":"E. Stefanov , E. Shi , and D. Song . Towards practical oblivious ram. arXiv preprint arXiv:1106.3652 , 2011 . E. Stefanov, E. Shi, and D. Song. Towards practical oblivious ram. arXiv preprint arXiv:1106.3652, 2011."},{"key":"e_1_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516660"},{"key":"e_1_2_1_45_1","volume-title":"W. on Hot Topics in Cloud Computing (HotCloud)","author":"Stephen J. J.","year":"2014","unstructured":"J. J. Stephen , S. Savvides , R. Seidel , and P. Eugster . Practical confidentiality preserving big data analysis . In W. on Hot Topics in Cloud Computing (HotCloud) , 2014 . J. J. Stephen, S. Savvides, R. Seidel, and P. Eugster. Practical confidentiality preserving big data analysis. In W. on Hot Topics in Cloud Computing (HotCloud), 2014."},{"key":"e_1_2_1_46_1","first-page":"277","volume-title":"Int. Conf. on Automated Software Engineering (ASE)","author":"Stephen J. J.","year":"2014","unstructured":"J. J. Stephen , S. Savvides , R. Seidel , and P. T. Eugster . Program analysis for secure big data processing . In Int. Conf. on Automated Software Engineering (ASE) , pages 277 -- 288 , 2014 . J. J. Stephen, S. Savvides, R. Seidel, and P. T. Eugster. Program analysis for secure big data processing. In Int. Conf. on Automated Software Engineering (ASE), pages 277--288, 2014."},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/2987550.2987574"},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.14778\/2535573.2488336"},{"key":"e_1_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICIOT.2018.00029"},{"key":"e_1_2_1_50_1","first-page":"283","volume-title":"14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 17)","author":"Zheng W.","year":"2017","unstructured":"W. Zheng , A. Dave , J. G. Beekman , R. A. Popa , J. E. Gonzalez , and I. Stoica . Opaque: An oblivious and encrypted distributed analytics platform . In 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 17) , pages 283 -- 298 , 2017 . W. Zheng, A. Dave, J. G. Beekman, R. A. Popa, J. E. Gonzalez, and I. Stoica. Opaque: An oblivious and encrypted distributed analytics platform. In 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 17), pages 283--298, 2017."}],"container-title":["Proceedings of the VLDB Endowment"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.14778\/3389133.3389144","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,28]],"date-time":"2022-12-28T11:18:43Z","timestamp":1672226323000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.14778\/3389133.3389144"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,4]]},"references-count":50,"journal-issue":{"issue":"8","published-print":{"date-parts":[[2020,4]]}},"alternative-id":["10.14778\/3389133.3389144"],"URL":"https:\/\/doi.org\/10.14778\/3389133.3389144","relation":{},"ISSN":["2150-8097"],"issn-type":[{"value":"2150-8097","type":"print"}],"subject":[],"published":{"date-parts":[[2020,4]]}}}