Cryptology ePrint Archive: Report 2020/690

SAFE: A Secure and Efficient Long-Term Distributed Storage System

Johannes Buchmann and Ghada Dessouky and Tommaso Frassetto and Ágnes Kiss and Ahmad-Reza Sadeghi and Thomas Schneider and Giulia Traverso and Shaza Zeitouni

Abstract: Secret sharing-based distributed storage systems are one approach to provide long-term protection of data even against quantum computing. Confidentiality is provided because the shares of data are renewed periodically while integrity is provided by commitment schemes. However, this solution is prohibitively costly and impractical: share renewal requires an information-theoretically secure channel between any two nodes and long-term confidential commitment schemes are computationally impractical for large files. In this paper, we present SAFE, a secret sharing-based long-term secure distributed storage system that leverages a Trusted Execution Environment (TEE) to overcome the above limitations. Share generation and renewal are performed inside the TEE and the shares are securely distributed to the storage servers. We prototype SAFE protocols using a TEE instantiation, and show their efficiency, even for large files, compared to existing schemes.

Category / Keywords: applications / Long-term security, secure storage, secret sharing, trusted execution environment, cloud security, applied cryptography

Original Publication (in the same form): International Workshop on Security in Blockchain and Cloud Computing (SBC'20)

Date: received 9 Jun 2020

Contact author: kiss at encrypto cs tu-darmstadt de

Available format(s): PDF | BibTeX Citation

Version: 20200609:234711 (All versions of this report)

Short URL: ia.cr/2020/690


[ Cryptology ePrint archive ]