PE-AONT: Partial Encryption All or Nothing Transform

Katarzyna Kapusta (1, 2) , Gerard Memmi (3, 4, 5)

1 Thales SIX GTS France
2 ThereSIS lab - Thales
3 Télécom Paris
4 IP Paris - Institut Polytechnique de Paris
5 ACES - Autonomic and Critical Embedded Systems

We introduce PE-AONT: a novel algorithm for very fast computational secret sharing scheme. The core idea of this scheme is to encrypt the data only partially before applying an all-or-nothing transform that will blend the encrypted and non-encrypted data. By doing this, we achieve much better performance than relevant techniques including straightforward encryption. To this regard, a performance benchmark is provided. Interestingly, when the ratio between the number of encrypted and non-encrypted fragments is wisely chosen, data inside fragments are protected against exposure of the encryption key unless all fragments are gathered by an attacker. Therefore, by choosing the right parameters, we can achieve key exposure protection, faster processing, and a better overall protection.

Keywords: Data fragmentation; Data dispersal; Distributed storage; Multi-storage; Cloud storage security; Key exposure; Secret sharing; All-or-nothing; AONT; SAKE-secure

Domains: Computer Science [cs]

Katarzyna Kapusta, Gerard Memmi. PE-AONT: Partial Encryption All or Nothing Transform. SECRYPT, Jul 2022, Lisbon, Portugal. pp.636-641, ⟨10.5220/0011300600003283⟩. ⟨hal-03860852⟩