EncryptedQuery

v2.2.3

Overview

Encrypted Query is designed to allow a user to query a remote database without revealing the contents of the query or the results from the database server. This is accomplished using techniques from Private Information Retrieval (PIR) with Paillier encryption. Encrypted Query has two distinct sides - the Querier and the Responder. The Querier prepares encrypted queries which are then submitted to the Responder. The Responder accepts encrypted queries and executes them on selected data sources without revealing the criteria contained in the query, or the data that is returned. All records of the selected data source are scanned during query execution.

Full service Integration and Support are available from EnQuery (https://enquery.net/)

New Features!

2.2.4

• Added support for returning JSON nested fields. These should be declared as type STRING_LIST or BYTEARRAY_LIST. 2.2.3
• Added HTTPS Support
• Added Seal-BFV crypto scheme for significantly improved performance. Note For Research Purposes Only.
• Improved deployment scripts for automated builds and deployment of Querier and Responder.
• Example scripting for instantiating AWS hosts with Responder

2.2.2

• Added SQL filtering for pre-query Responder filtering

2.2.1

• Assorted Postman and UI fixes

2.2.0

• Added support for Hadoop processing
• Added Offline Mode. This allows the Querier and Responder to function without direct communication. Users will import/export files from the servers to perform queries.

2.1.4

• Updated Algorithm for Standalone and Flink JDBC processing methods. This change improved performance by ~40%.
• Updated FieldTypes and UI to simplify creating encrypting queries.
• New Look and feel for UI to be more intuitive.

2.1.3

• Added GPU processing support for Paillier Crypto scheme. Use of a GPU for processing on the Responder and also Decryption on the Querier has been added if a GPU is available on the server.

2.1.2

• Fixed bug with ISO8601Date formatting.
• Change to Paillier Encryption/Decryption to increase performance. (Note: This version will no be able to decrypt queries encrypted by prior versions !)

2.1.1

• Added start/end times for result files in the UI. Better handling of multiple result files from streaming queries.
• Reduced logging on Querier side.
• Better status reporting back to the querier when a query job fails on the responder.
• Updated UI for scheduling Streaming jobs.

2.1

• Drop in Encryption. Encryption/Decryption has been modularized to allow other drop in encryption schemes
• Streaming query execution. Queries can now be executed against a Kafka stream. Streams can be processed in a Tumbling windows fashion.
• Larger chunk sizes for Paillier DeRooij encryption. Chunk sizes used to be limited to 3. Max chunk size for Paillier DeRooij is now ( (paillier-bit-size - 1) / 8 / number of targeted selectors )
• Native Libraries can now be built on Centos, Ubuntu, & Mac OS
• hashBitSize parameter is now set in the querier configuration. Users no longer have to add it to the Encrypt Query REST call.
• Update JSON parsing allows nested json elements to be accessed.

2.0

• Separated the Querier and Responder into standalone Entities. Allows you to separate the Encrypting/Decrypting of a query in an Enclave separating it from the Query Execution. The Responder will be located where the data is and using REST interfaces to communicate between the Querier and Responder.
• Basic UI to communicate with the Querier
• Query files are in xml format
• Uses Apache Karaf as a container for REST interfaces and operations
• Stores execution Information in a self contained database (Derby) or in a user established MariaDB.
• Run the query in an Apache Flink cluster for distributed processing (JDBC queries now, others to follow)

Additional Documentation

Export Control

This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See The Wassenaar Arrangement for more information. The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code. The following provides more details on the included cryptographic software: Encrypted Query implements cryptographic software and is designed for use with the Java Cryptography Architecture (JCA). See Oracle Product ECCN Matrices

License

EncryptedQuery is an open source project allowing user to query databases with queries under homomorphic encryption to securing the query and results set from database owner inspection. Copyright (C) 2018 EnQuery LLC

This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License along with this program. If not, see https://www.gnu.org/licenses/.