International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

A High-Performance Enterprise System for Key Management

Authors:
Olla Nasirov
Gleb Keselman
Alon Rosen
Yaron Sheffer
Margarita Vald
Download:
Search ePrint
Search Google
Presentation: Slides
Abstract: We present a system for key management and protection of data at rest. At the heart of our system is a new protocol for secure key derivation, departing from the common practice of envelope encryption. Our solution adheres to existing enterprise architecture best practices and performance requirements. Our system is implemented at industrial scale, managing tens of thousands of root keys and serving thousands of server side key derivation requests per second. Our system is not only performant in terms of latency and throughput, but also offers non-trivial monetary cost reduction. The talk will present the key derivation protocol, and discuss system’s security and scalability.
Video: https://www.youtube.com/watch?v=r0tGWTemwYE
BibTeX
@misc{rwc-2024-35381,
  title={A High-Performance Enterprise System for Key Management},
  note={Video at \url{https://www.youtube.com/watch?v=r0tGWTemwYE}},
  howpublished={Talk given at RWC 2024},
  author={Olla Nasirov and Gleb Keselman and Alon Rosen and Yaron Sheffer and Margarita Vald},
  year=2024
}