The ephemerizer: making data disappear

Summary

The design in this paper ensure that even if a client's machine gets compromised, and everything in stable storage (including long term user keys) is stolen, any data that has expired before the compromise remains unrecoverable.

Keywords

Backup, Computer science, Computer security, Encryption, Key (lock)

References

Two remarks on public key cryptologyRoss Anderson — 2002
Interconnections: Bridges, Routers, Switches, and Internetworking ProtocolsRadia Perlman — 1999
A method for obtaining digital signatures and public-key cryptosystemsRonald L. Rivest, Adi Shamir, Leonard M. Adleman — 1978
On the performance, feasibility, and use of forward-secure signaturesEric Cronin, Sugih Jamin, Tal Malkin — 2003
Public-key cryptosystems provably secure against chosen ciphertext attacksMoni Naor, Moti Yung — 1990
New Directions in CryptographyWhitfield Diffie, Martin E. Hellman — 1976
A Forward-Secure Digital Signature SchemeMihir Bellare, Sara Miner — 1999
Blind Signatures for Untraceable PaymentsD. Chaum — 1982
An Improved Algorithm for Computing Logarithms over GP(p) and Its Cryptographic SignificanceS. Pohlig — 1978
Network security - private communication in a public worldC. Kaufman, R. Perlman, Mike Speciner — 1995

Cited by

Current State of Information Security Research In ISHumayun Zafar, Jan Guynes Clark — 2009
Vanish: Increasing Data Privacy with Self-Destructing DataRoxana Geambasu, Tadayoshi Kohno, Amit Levy — 2009
Data Node Encrypted File System: Efficient Secure Deletion for Flash MemoryJoel Reardon, Srđjan Čapkun, David Basin — 2012
File system design with assured deleteRadia Perlman — 2005
Design and Implementation of the Ephemerizer SystemShangjin Xu — 2007
Investigating the Computer Security Practices and Needs of JournalistsSusan E. McGregor, Polina Charters, Tobin Holliday — 2015
Design principles and patterns for computer systems that are simultaneously secure and usableDavid D. Clark, Robert C. Miller, Simson Garfinkel — 2005
Implémenter le droit à l'oubliSimon Bouget — 2013
Adding Integrity to the Ephemerizer's ProtocolCharu Arora, Mathieu Turuani — 2006
Privacy Principles for Sharing Cyber Security DataGina Fisk, Calvin Ardi, Neale Pickett — 2015
Private environments for programsA. Dunn — 2014
X-pire! - A digital expiration date for images in social networksJulian Backes, Michael Backes, Markus Dürmuth — 2011
Eternal Sunshine of the Spotless Machine: Protecting Privacy with Ephemeral ChannelsAlan M. Dunn, Michael Z. Lee, Suman Jana — 2012
Measuring Large-Scale Social Networks with High ResolutionArkadiusz Stopczynski, Vedran Sekara, Piotr Sapieżyński — 2014
Secure data deletion from persistent mediaJoel Reardon, Hubert Ritzdorf, David Basin — 2013
A Secure Document Self-Destruction Scheme: An ABE ApproachJinbo Xiong, Zhiqiang Yao, Jianfeng Ma — 2013
Timed revocation of user data: long expiration times from existing infrastructureSirke Reimann, Markus Dürmuth — 2012
PrivExec: Private Execution as an Operating System ServiceKaan Onarlıoğlu, Collin Mulliner, William Robertson — 2013
Enabling secure VM-vTPM migration in private cloudsBoris Danev, Ramya Jayaram Masti, Ghassan Karame — 2011
Harnessing data loss with forgetful data structuresAzza Abouzied, Jay Chen — 2015

Related papers

Vanish: Increasing Data Privacy with Self-Destructing DataRoxana Geambasu, Tadayoshi Kohno, Amit Levy — 2009
Defeating Vanish with Low-Cost Sybil Attacks Against Large DHTsScott Wolchoky, Owen S. Hofmanny, Nadia Heninger — 2010
A Revocable Backup SystemDan Boneh, Richard J. Lipton — 1996
How to share a secretAdi Shamir — 1979
Secure deletion of data from magnetic and solid-state memoryPeter Gutmann — 1996
Secure deletion for a versioning file systemZachary Peterson, Randal Burns, Joe Herring — 2005
SoK: Secure Data DeletionJoel Reardon, David Basin, Srđjan Čapkun — 2013
EphPub: Toward robust Ephemeral PublishingClaude Castelluccia, Emiliano De Cristofaro, Aurélien Francillon — 2010