Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

The main motivation for Oblivious RAM (ORAM) is that, for instance, in the "cloud" setting a client outsources his data to a server in the form of encrypted blocks. Later on, he wants to perform read and write operation on these encrypted blocks, which apparently may leak information about what data is stored. ORAM now ensures that the server cannot tell which blocks the client is interested in and whether he is reading or writing.

My question is: Are there any concrete examples/attacks, where the access pattern on encrypted data leaks sensitive data?

share|improve this question
This is a bit broad to answer, as it strongly depends on what kind of O-RAM implementation you’re asking about: HASH-based Oblivious RAM, Oblivious RAM via FHE, Oblivious RAM via Symmetric Encryption, … Some of them have concrete examples and/or attacks, others don’t. –  e-sushi May 21 '14 at 15:48
@e-sushi I don't quite get what your comment is trying to convey. He is NOT asking about attacks on ORAM (this is indeed a much used abbreviation). He is asking about the attacks on non oblivious encrypted data-structures that are the motivation to develop ORAM construction (be that Hash based or whatever) –  Maeher May 21 '14 at 16:52
@Maeher Hmmm, in that case it’s definitely a bit too broad… and lacks research efforts, as a quick lookup for “attack access patterns encrypted data” spits out a truckload of papers like this one and this one. Giving it the benefit of the doubt, I initially interpreted the question and its description as asking for such attacks in an O-RAM setting… where different implementations may lead to different access patterns, which is why I pointed to the missing info re implementation type. –  e-sushi May 21 '14 at 18:31

1 Answer 1

up vote 0 down vote accepted

By observing data access patterns in emails researchers were able to infer search pattern.

share|improve this answer
Hello curious, please add an excerpt from the paper in your answer to show why the it is a good source. –  rath May 22 '14 at 6:08
This paper is a great find and very relevant. On the other hand, its threat model makes some assumptions that might not be realistic in practice. It requires that the server know some of the queries (a known-plaintext setting) and have a priori knowledge on some frequency statistics concerning the unencrypted emails. I find it hard to tell whether their attacks will be realistic in the real world or not. –  D.W. Jun 23 '14 at 1:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.