The Design and Implementation of a Rekeying-aware Encrypted Deduplication Storage System
Chuan Qin, Jingwei Li, Patrick P. C. Lee

TL;DR
This paper introduces REED, a rekeying-aware encrypted deduplication storage system that enables efficient rekeying and dynamic access control while maintaining high performance and storage efficiency.
Contribution
It presents a novel deterministic AONT-based approach for secure, lightweight rekeying in encrypted deduplication storage systems, with practical implementation and optimization.
Findings
REED maintains high performance in rekeying scenarios.
The system effectively reduces key generation overhead.
REED preserves deduplication efficiency during rekeying.
Abstract
Rekeying refers to an operation of replacing an existing key with a new key for encryption. It renews security protection, so as to protect against key compromise and enable dynamic access control in cryptographic storage. However, it is non-trivial to realize efficient rekeying in encrypted deduplication storage systems, which use deterministic content-derived encryption keys to allow deduplication on ciphertexts. We design and implement REED, a rekeying-aware encrypted deduplication storage system. REED builds on a deterministic version of all-or-nothing transform (AONT), such that it enables secure and lightweight rekeying, while preserving the deduplication capability. We propose two REED encryption schemes that trade between performance and security, and extend REED for dynamic access control. We implement a REED prototype with various performance optimization techniques and…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
