Sophos

Abstract

What is SSE
Disadvantages of non-forward privacy
This work proposes a simpler&efficient construction. Detail: trapdoor permutations no ORAM. Security
Implementation and evaluation

Introduction

Ideally, no leakage, impractical
Background
Contributions:

• a forward private SSE scheme
• PRF & trapdoor permutations
• proof
• implementation

Related work

Preliminaries

PRF keyed hash functions

• trapdoor permutations
• SSE
• Security of SSE: correctness, confidentiality, common leakage(query pattern, HistDB(w),Hist(w))

Forward privacy

• Definition
• Need
• Constrains induced by forward privacy

Sophos construction

• General ideas
• Basic construction
• Security