Implementing fully homomorphic encryption schemes in FPGA-based systems

LLas nuevas tecnologías orientadas a la nube, el internet de las cosas o las tendencias "as a service" se basan en el almacenamiento y procesamiento de datos en servidores remotos. Para garantizar la seguridad en la comunicación de dichos datos al servidor remoto, y en el manejo de los mismos en dicho servidor, se hace uso de diferentes esquemas criptográficos. Tradicionalmente, dichos sistemas criptográficos se centran en encriptar los datos mientras no sea necesario procesarlos (es decir, durante la comunicación y almacenamiento de los mismos). Sin embargo, una vez es necesario procesar dichos datos encriptados (en el servidor remoto), es necesario desencriptarlos, momento en el cual un intruso en dicho servidor podría a acceder a datos sensibles de usuarios del mismo. Es más, este enfoque tradicional necesita que el servidor sea capaz de desencriptar dichos datos, teniendo que confiar en la integridad de dicho servidor de no comprometer los datos. Como posible solución a estos problemas, surgen los esquemas de encriptación homomórficos completos. Un esquema homomórfico completo no requiere desencriptar los datos para operar con ellos, sino que es capaz de realizar las operaciones sobre los datos encriptados, manteniendo un homomorfismo entre el mensaje cifrado y el mensaje plano. De esta manera, cualquier intruso en el sistema no podría robar más que textos cifrados, siendo imposible un robo de los datos sensibles sin un robo de las claves de cifrado. Sin embargo, los esquemas de encriptación homomórfica son, actualmente, drás-ticamente lentos comparados con otros esquemas de encriptación clásicos. Una op¬eración en el anillo del texto plano puede conllevar numerosas operaciones en el anillo del texto encriptado. Por esta razón, están surgiendo distintos planteamientos sobre como acelerar estos esquemas para un uso práctico. Una de las propuestas para acelerar los esquemas homomórficos consiste en el uso de High-Performance Computing (HPC) usando FPGAs (Field Programmable Gate Arrays). Una FPGA es un dispositivo semiconductor que contiene bloques de lógica cuya interconexión y funcionalidad puede ser reprogramada. Al compilar para FPGAs, se genera un circuito hardware específico para el algorithmo proporcionado, en lugar de hacer uso de instrucciones en una máquina universal, lo que supone una gran ventaja con respecto a CPUs. Las FPGAs tienen, por tanto, claras difrencias con respecto a CPUs: -Arquitectura en pipeline: permite la obtención de outputs sucesivos en tiempo constante -Posibilidad de tener multiples pipes para computación concurrente/paralela. Así, en este proyecto: -Se realizan diferentes implementaciones de esquemas homomórficos en sistemas basados en FPGAs. -Se analizan y estudian las ventajas y desventajas de los esquemas criptográficos en sistemas basados en FPGAs, comparando con proyectos relacionados. -Se comparan las implementaciones con trabajos relacionados New cloud-based technologies, the internet of things or "as a service" trends are based in data storage and processing in a remote server. In order to guarantee a secure communication and handling of data, cryptographic schemes are used. Tradi¬tionally, these cryptographic schemes focus on guaranteeing the security of data while storing and transferring it, not while operating with it. Therefore, once the server has to operate with that encrypted data, it first decrypts it, exposing unencrypted data to intruders in the server. Moreover, the whole traditional scheme is based on the assumption the server is reliable, giving it enough credentials to decipher data to process it. As a possible solution for this issues, fully homomorphic encryption(FHE) schemes is introduced. A fully homomorphic scheme does not require data decryption to operate, but rather operates over the cyphertext ring, keeping an homomorphism between the cyphertext ring and the plaintext ring. As a result, an outsider could only obtain encrypted data, making it impossible to retrieve the actual sensitive data without its associated cypher keys. However, using homomorphic encryption(HE) schemes impacts performance dras-tically, slowing it down. One operation in the plaintext space can lead to several operations in the cyphertext space. Because of this, different approaches address the problem of speeding up these schemes in order to become practical. One of these approaches consists in the use of High-Performance Computing (HPC) using FPGAs (Field Programmable Gate Array). An FPGA is an integrated circuit designed to be configured by a customer or a designer after manufacturing - hence "field-programmable". Compiling into FPGA means generating a circuit (hardware) specific for that algorithm, instead of having an universal machine and generating a set of machine instructions. FPGAs have, thus, clear differences compared to CPUs: - Pipeline architecture, which allows obtaining successive outputs in constant time. -Possibility of having multiple pipes for concurrent/parallel computation. Thereby, In this project: -We present different implementations of FHE schemes in FPGA-based systems. -We analyse and study advantages and drawbacks of the implemented FHE schemes, compared to related work.

Compendium of authenticated systems and logistics terms, definitions, and acronyms.

"AU-AFIT-LS-3-81."

Geary and Kansas. Governor Geary's administration in Kansas: with a complete history of the territory until June 1857: embracing a full account of its discovery, geography, soil, rivers, climate, products; its organization as a territory. All fully authenticated.

Mode of access: Internet.

Authenticated report of the discussion which took place between the Rev. Richard T. P. Pope, and the Rev. Thomas Maguire, in the lecture room of the Dublin Institution, on the 19th, 20th, 21st, 23d, 24th, and 25th of April, 1827.

Mode of access: Internet.

Maintenance testing for the data encryption standard /

"Issued August 1980."

Computer security and the data encryption standard : proceedings of the Conference on Computer Security and the Data Encryption Standard held at the National Bureau of Standards in Gaithersburg, Maryland, on February 15, 1977 /

Mode of access: Internet.

Instinct displayed, in a collection of well-authenticated facts, exemplifying the extraordinary sagacity of various species of the animal creation.

Mode of access: Internet.

The welcome visitor, or, The good uncle : being a collection of original stories, containing several well-authenticated anecdotes, displaying striking traits of virtue and heroism in early life.

Copy in Dept. of Rare Books and Special Collections bound in old marbled boards and dark red leather spine. Blue speckled page edges. Inscribed on front endpaper: "Gilbert Elliot from his sisters on his birthday Feb. 23, 1835."

Authenticated report of the discussion which took place at Londonderry, : between six Roman Catholic priests, and six clergymen of the Established Church in the Diocese of Derry, March 1828.

Mode of access: Internet.

News from the invisible world; or, Interesting anecdotes of the dead. Containing a particular survey of the most remarkable and well-authenticated accounts of apparitions, ghosts, spectres, dreams and visions;

Mode of access: Internet.

The surprising case of Rachel Baker, who prays and preaches in her sleep, with specimens of her extraordinary performances taken down accurately in short hand at the time; and showing the unparelleled powers she possesses to pray, exhort, and answer questions, during her unconscious state. The whole authenticated by the most respectable testimony of living witnesses.

Further utterances ascribed to Rachel Baker were published in Devotional somnium, edited by J. H. Douglass, New York, 1815.

The surprising case of Rachel Baker, who prays and preaches in her sleep : with specimens of her extraordinary performances taken down accurately in short hand at the time; and showing the unparalleled powers she possesses to pray, exhort, and answer questions, during her unconscious state. The whole authenticated by the most respectable testimony of living witnesses /

Signatures: A-D⁴.

Last will and testament of George Washington, of Mount Vernon , the only authenticated copy, full and complete, embracing a schedule of his real estate,

Presented by Mr. Heyburn. Ordered to be printed, August 5, 1911.