6
$\begingroup$

Porticor has an interesting file encryption offering for encrypting and decrypting files in an MySQL database quickly.

They are an Amazon AWS (Amazon Web Service) Partner Network technology partner and their product is available in the AWS Marketplace.

It seems similar to Gazzang's zNcrypt.

Porticor has been touting for a while that it will be offering homomorphic key management. That sounds very interesting and appealing, but it seems to be taking them a long time to roll it out.

Is it theoretically feasible for them to implement this, or is it just marketing hype? I'm beginning to wonder.

Improve this question
$\endgroup$
2
  • $\begingroup$ See also How is CipherCloud doing homomorphic encryption? for a related topic (though not identical). $\endgroup$ – D.W. Sep 3 '12 at 20:06
  • $\begingroup$ Welcome to cryptography Stack Exchange. Your question was migrated here, because it is mainly about the theoretical parts of cryptography, not the application thereof (which would be on topic on Security Stack Exchange). Please register your account on both sites (using the same mail address) to take ownership of your question again, be able to edit, comment and accept an answer. $\endgroup$ – Paŭlo Ebermann Sep 4 '12 at 7:29
3
$\begingroup$

The details are very sparse as to what they are actually doing. So, I'll speculate. Below are some claims and what I think they are doing.

The master key (in its plain unencrypted form) will be literally nowhere in the cloud, yet completely usable for split-key encryption.

Typically this is done using some sort of secret sharing, which doesn't necessarily mean homomorphic encryption (HE). That said, there are some advantages with using HE. Under typical secret sharing, the secret must be reconstructed at some point. With HE, that is no longer the case. Encryption and Decryption can be done homomorphically (see this and this). Timing results of both are promising and could be considered practical, especially for the first link.

we only have an encrypted form of the master keys. In more technical words, the Porticor product will perform split-key encryption with a partially homomorphically encrypted master key.

This leads me to believe they are doing something similar to the two links above. They store an encrypted version of the master key and their management key (similar to the safe deposit box they describe), and use those to encrypt/decrypt data. Most likely they are doing something similar to the first link as the result of that encryption/decryption is plaintext where the result of the 2nd link is not plaintext but the plaintext encrypted with the homomorphic key.

Assuming I am correct (who knows though as they don't publish the details yet), I would say it is practical. Look at the timing results in that paper. At the same time, it is somewhat marketing hype. Sure "The master key (in its plain unencrypted form) will be literally nowhere in the cloud, yet completely usable for split-key encryption" but the data must be decrypted at some point and can be stolen at that point in time. Also, I'm not sure I'd trust my data being protected by such new techniques yet. The field of homomorphic encryption is such an unstable field right now.

Improve this answer
$\endgroup$
3
  • $\begingroup$ their paper is out, you can get a copy here , porticor.com/hkm-analysis $\endgroup$ – sashank Nov 6 '12 at 19:01
  • 1
    $\begingroup$ @sashank, it would be interesting to read, but I prefer not to give them my personal info just to read about their technology. $\endgroup$ – mikeazo Nov 7 '12 at 2:15
  • $\begingroup$ even i was skeptical, not sure why most of the companies are practicing off late this model to give our personal info in order to get a white paper , anyway am going through the document and i see there are few gaps in the analysis am not yet done though. May be they have consciously omitted few things for proprietary reasons $\endgroup$ – sashank Nov 7 '12 at 6:34
2
$\begingroup$

Here’s is a crypto analysis on Porticor system.

From my point of view the system is almost useless in a cloud environment because its security can only be proved on a semi-honest model, witch means you have to trust Porticor and your cloud provider… not very likely in a post-NSA era.

I'm not an cryptographer, but I've implemented a PHE schema used on financial data. I could be wrong, but IMHO there is no need to use homomorphic encryption techniques to build a key management system like this.

Improve this answer
$\endgroup$
1
$\begingroup$

From the link , they clearly say, they do, partially Homomorphic encryption only. which is feasible from long back .

It seems similar to Gazzang's zNcrypt.

Although both Gazzang and porticor try to solve same problem of Key Management for cloud based applications , Gazzang literally stores all user keys in their hardened MySQL server and provides Key Management as Sw-as-a-Service, So here user needs to "trust" Gazzang.

Where as porticor uses split key technology, the master key in unencrypted form is stored neither with them nor in the cloud , relatively this is much better i feel. They use a combination of encrypted master key and specific keys and homomorphically compute bigger key to encrypted and decrypt data ,although its not clear for me how exactly it works either from their white paper or analysis paper.

Improve this answer
$\endgroup$
0
$\begingroup$

Porticor's Homomorphic Key management is now released. So that is says something on the theoretical feasibility question.

The other commenters are correct when they say - the mathematical technique used is Partially Homomorphic Encryption (PHE). Porticor applies this to encryption keys, in order to encrypt the keys in the cloud, rather than the masses of data.

A very technical (and hard to read) analysis is here

Improve this answer
$\endgroup$
2
  • 2
    $\begingroup$ ... and the white paper is only accessible after providing contact data. Why? $\endgroup$ – Paŭlo Ebermann Nov 11 '12 at 15:50
  • 2
    $\begingroup$ Can you edit your answer to provide a summary of the contents of those documents and their implications for the answer to the question that was asked here? As it stands, the main content of your answer is the links, but on this site we tend not to like link-only answers very much, because links may rot or disappear. $\endgroup$ – D.W. Mar 29 '14 at 23:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy