EncDB-FR$^{3}$3: An Encrypted Database With Fault Recovery and Rollback Resistance
Haitao Wang, Bingsheng Zhang, Kui Ren · IEEE Transactions on Dependable and Secure Computing · 2025
Data breaches are the most common security challenges in cloud databases. Due to the lack of control over the underlying infrastructure of cloud databases, data owners can only rely on the trustworthiness and management capabilities of the cloud service provider for data security. This work introduces EncDB-FR$^{3}$– a novel encrypted database specifically designed for cloud scenarios. The primary focus of EncDB-FR$^{3}$is to address the vulnerabilities inherented in cloud service environments, particularly those posed by malicious entities with control over the software stack. By leveraging Trusted Execution Environments (TEE), EncDB-FR$^{3}$ensures the confidentiality, integrity, and freshness of data. The system architecture of EncDB-FR$^{3}$integrates a secure B+ Merkle tree structure along with a so-calledunique transaction commit process. This process combines a trusted monotonic counter with redo logs to ensure robustness against rollback attacks while maintaining database durability. According to commonly used database benchmarks, EncDB-FR$^{3}$achieves strong security with low overhead, addressing a crucial gap in existing cloud database solutions. Compared to the widely adoptedFieldEncimplementation (AE, SIGMOD'20, StealthDB, PoPETs'19, and Operon, VLDB'22), EncDB-FR$^{3}$demonstrates superior performance with a 1.16× throughput, a 0.85× average latency. Besides, the disk space utilized by EncDB-FR$^{3}$is only 10% of that used byFieldEncw.r.t. the same dataset. Furthermore, to the best of our knowledge, EncDB-FR$^{3}$is the only disk-based encrypted relational database that can withstand rollback attacks.