Cryptology ePrint Archive: Report 2010/366
Oblivious RAM Revisited
Benny Pinkas and Tzachy Reinman
Abstract: We reinvestigate the oblivious RAM concept introduced by Goldreich and Ostrovsky, which enables a client, that can store locally only a constant amount of data, to store remotely $n$ data items, and access them while hiding the identities of the items which are being accessed. Oblivious RAM is often cited as a powerful tool, which can be used, for example, for search on encrypted data or for preventing cache attacks. However, oblivious RAM it is also commonly considered to be impractical due to its overhead, which is asymptotically efficient but is quite high: each data request is replaced by $O(\log^4 n)$ requests, or by $O(\log^3 n)$ requests where the constant in the ``$O$'' notation is a few thousands. In addition, $O(n \log n)$ external memory is required in order to store the $n$ data items. We redesign the oblivious RAM protocol using modern tools, namely Cuckoo hashing and a new oblivious sorting algorithm. The resulting protocol uses only $O(n)$ external memory, and replaces each data request by only $O(\log^2 n)$ requests (with a small constant). This analysis is validated by experiments that we ran.
Category / Keywords: Secure two-party computation, oblivious RAM
Publication Info: This is a full version. A proceedings version is published in Crypto 2010.
Date: received 22 Jun 2010
Contact author: reinman at cs huji ac il
Available format(s): PDF | BibTeX Citation
Version: 20100625:125210 (All versions of this report)
Short URL: ia.cr/2010/366
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]