News for hackers. Stuff that matters.
Re:Google’s Fully Homomorphic Encryption Compiler – A Primer by whatshisface on Monday February 13, 2023 @09:44PM (#34784575)
"Encrypted queries for an encrypted database" could be as straightforward as encrypting both the keys and values using a known public key and putting the results in MySQL. You have to be careful with the claims made around these kinds of things because they often appear to be more complex than they are.
Re:Google’s Fully Homomorphic Encryption Compiler – A Primer by teraflop on Monday February 13, 2023 @09:58PM (#34784669)
It's not nearly that simple. If your encryption scheme is deterministic then this leaks a ton of information, because anybody with the public key can just encrypt lots of values to reconstruct a mapping between plaintexts and ciphertexts. On the other hand, if your encryption scheme isn't deterministic, then you can't predict what encrypted value you should query for.
Re:Google’s Fully Homomorphic Encryption Compiler – A Primer by whatshisface on Monday February 13, 2023 @10:09PM (#34784742)
Those kinds of problems have never stopped any company from offering a service with a lot of nice graphics on the home page.
Re:Google’s Fully Homomorphic Encryption Compiler – A Primer by 5ersi on Monday February 13, 2023 @11:08PM (#34785160)
Add random data to it, so that all (equivalent) data is the same length. For example, if you have a four byte field that represents some monetary value, add four more bytes of random data and encrypt it.
Re:Google’s Fully Homomorphic Encryption Compiler – A Primer by kientuong114 on Tuesday February 14, 2023 @08:09AM (#34788750)
How would you run queries over that?
Re:Google’s Fully Homomorphic Encryption Compiler – A Primer by hn_throwaway_99 on Monday February 13, 2023 @09:51PM (#34784615)
Huh? How would you search on any encrypted fields?
Re:Google’s Fully Homomorphic Encryption Compiler – A Primer by KMag on Monday February 13, 2023 @11:01PM (#34785114)
No subfield matches, no comparisons other than == and != on the whole field, and only works with deterministic encryption... so leaks like a sieve under many threat models.
Re:Google’s Fully Homomorphic Encryption Compiler – A Primer by admax88qqq on Monday February 13, 2023 @09:54PM (#34784646)
lol no it's not.

Up can't do a range on encrypted data. If you encrypt 5 and encrypt 10, how do you expect to compare the encrypted results to see which is greater?

If all you do is key value lookup then sure. But SQL is much richer than that.

Re:Google’s Fully Homomorphic Encryption Compiler – A Primer by amadvance on Tuesday February 14, 2023 @03:35AM (#34786903)
Even lookup is not easy to be done securely. You don't want that a malicious server/database knows that you are accessing always that record.

See this discussion about how to achieve that: https://news.ycombinator.com/item?id=31668814