Document Open Access Logo

MetaDORAM: Info-Theoretic Distributed ORAM with Less Communication

Authors Brett Hemenway Falk , Daniel Noble , Rafail Ostrovsky

PDF HTML 5

Files

Thumbnail PDF
PDF
LIPIcs.ITC.2025.6.pdf
  • Filesize: 0.87 MB
  • 23 pages
HTML5 Logo HTML (experimental)
LIPIcs.ITC.2025.6.html

Document Identifiers

Related Versions

Subject Classification

ACM Subject Classification
  • Security and privacy → Information-theoretic techniques
  • Theory of computation → Communication complexity
  • Theory of computation → Cryptographic primitives
  • Security and privacy → Management and querying of encrypted data
Keywords
  • ORAM
  • MPC
  • DORAM
  • multi-server ORAM
  • active ORAM

Metrics

Abstract

A Distributed Oblivious RAM is a multi-party protocol that securely implements a RAM functionality on secret-shared inputs and outputs. This paper presents two information-theoretically secure DORAMs whose communication costs are asymptotic improvements over the state of the art. Let n be the number of memory locations and let d be the bit-length of each location.
The first, MetaDORAM1, is statistically secure, with n^{-ω(1)} leakage. It has amortized O(log_b(n) d + b ω(1) log(n) + log³(n)/log(log(n))) bits of communication per memory access. Here, b ≥ 2 is a free parameter and ω(1) is any super-constant function (in n). The most communication-efficient prior statistically secure DORAM was that of Abraham et al (PKC 2017), which has cost O(log_b(n) d + b ω(1) log_b(n) log²(n)). MetaDORAM1 is a Θ(ω(1) log(log(n)))-factor improvement over the work of Abraham et al whenever d = O(log²(n)). 
The second protocol, MetaDORAM2, achieves perfect security. It has amortized communication cost O(log_b(n)d + b log(n) + log³(n)/log(log(n))) where, again, b ≥ 2 is a free parameter. The best prior perfectly secure DORAM is that of Chan et al (ASIACRYPT 2018) which has communication cost O(log(n) d + log³(n)). MetaDORAM2 is therefore a Ω(log(log(n)))-factor improvement over the DORAM of Chan et al under any parameter range (by setting b = log(n)) and is a Θ(log(n))-factor improvement for d = Ω(n^ε) for any constant ε > 0 (by setting b = d/log(n)). Our work is the first perfectly secure DORAM with sub-logarithmic communication overhead. MetaDORAM2 comes at the cost of a once-off (for any given n) setup phase which requires exponential (in n) computation.
Both DORAMs are in the 3-party setting with security against 1 semi-honest, static corruption. By a trivial transformation, these can be transformed, respectively, into statistically and perfectly secure active 3-server ORAM protocols secure against 1 corrupt server, with the same communication costs. These multi-server ORAM protocols are likewise asymptotic improvements over the state of the art.

Cite As Get BibTex

Brett Hemenway Falk, Daniel Noble, and Rafail Ostrovsky. MetaDORAM: Info-Theoretic Distributed ORAM with Less Communication. In 6th Conference on Information-Theoretic Cryptography (ITC 2025). Leibniz International Proceedings in Informatics (LIPIcs), Volume 343, pp. 6:1-6:23, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2025) https://doi.org/10.4230/LIPIcs.ITC.2025.6

Author Details

Brett Hemenway Falk
  • University of Pennsylvania, Philadelphia, PA, USA
Daniel Noble
  • Silence Laboratories, Singapore
Rafail Ostrovsky
  • UCLA, CA, USA

Funding

This research was supported in part by DARPA under Cooperative Agreement HR0011-20-2-0025, the Algorand Centers of Excellence programme managed by Algorand Foundation, NSF grants CNS-2246355, CCF-2220450 and CNS-2001096, US-Israel BSF grant 2022370, Amazon Faculty Award, Cisco Research Award, Sunday Group, ONR grant (N00014-15-1-2750) “SynCrypt: Automated Synthesis of Cryptographic Constructions” and a gift from Ripple Labs, Inc. Any views, opinions, findings, conclusions or recommendations contained herein are those of the author(s) and should not be interpreted as necessarily representing the official policies, either expressed or implied, of DARPA, the Department of Defense, the Algorand Foundation, or the U.S. Government. The U.S. Government is authorized to reproduce and distribute reprints for governmental purposes, notwithstanding any copyright annotation therein.

Acknowledgements

Daniel Noble would also like to acknowledge God for supporting him in this research.

References

  1. Ittai Abraham, Christopher W Fletcher, Kartik Nayak, Benny Pinkas, and Ling Ren. Asymptotically tight bounds for composing ORAM with PIR. In IACR International Workshop on Public Key Cryptography, pages 91-120. Springer, 2017. URL: https://doi.org/10.1007/978-3-662-54365-8_5.
  2. Toshinori Araki, Jun Furukawa, Yehuda Lindell, Ariel Nof, and Kazuma Ohara. High-throughput semi-honest secure three-party computation with an honest majority. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, pages 805-817, 2016. URL: https://doi.org/10.1145/2976749.2978331.
  3. Toshinori Araki, Jun Furukawa, Kazuma Ohara, Benny Pinkas, Hanan Rosemarin, and Hikaru Tsuchida. Secure graph analysis at scale. In Yongdae Kim, Jong Kim, Giovanni Vigna, and Elaine Shi, editors, CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, Republic of Korea, November 15 - 19, 2021, pages 610-629. ACM, 2021. URL: https://doi.org/10.1145/3460120.3484560.
  4. Gilad Asharov, Ilan Komargodski, Wei-Kai Lin, Kartik Nayak, Enoch Peserico, and Elaine Shi. OptORAMa: optimal oblivious RAM. In Advances in Cryptology-EUROCRYPT 2020: 39th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Zagreb, Croatia, May 10-14, 2020, Proceedings, Part II 30, pages 403-432. Springer, 2020. URL: https://doi.org/10.1007/978-3-030-45724-2_14.
  5. Gilad Asharov, Ilan Komargodski, Wei-Kai Lin, and Elaine Shi. Oblivious ram with worst-case logarithmic overhead. Journal of Cryptology, 36(2):7, 2023. URL: https://doi.org/10.1007/s00145-023-09447-5.
  6. Michael Ben-Or, Shafi Goldwasser, and Avi Wigderson. Completeness theorems for non-cryptographic fault-tolerant distributed computation (extended abstract). In Janos Simon, editor, Proceedings of the 20th Annual ACM Symposium on Theory of Computing, May 2-4, 1988, Chicago, Illinois, USA, pages 1-10. ACM, 1988. URL: https://doi.org/10.1145/62212.62213.
  7. Dan Bogdanov, Sven Laur, and Jan Willemson. Sharemind: A framework for fast privacy-preserving computations. In Sushil Jajodia and Javier López, editors, Computer Security - ESORICS 2008, 13th European Symposium on Research in Computer Security, Málaga, Spain, October 6-8, 2008. Proceedings, volume 5283 of Lecture Notes in Computer Science, pages 192-206. Springer, Springer, 2008. URL: https://doi.org/10.1007/978-3-540-88313-5_13.
  8. Paul Bunn, Jonathan Katz, Eyal Kushilevitz, and Rafail Ostrovsky. Efficient 3-party distributed ORAM. In Security and Cryptography for Networks: 12th International Conference, SCN 2020, Amalfi, Italy, September 14-16, 2020, Proceedings 12, pages 215-232. Springer, 2020. URL: https://doi.org/10.1007/978-3-030-57990-6_11.
  9. T-H Hubert Chan, Yue Guo, Wei-Kai Lin, and Elaine Shi. Oblivious hashing revisited, and applications to asymptotically efficient ORAM and OPRAM. In Advances in Cryptology-ASIACRYPT 2017: 23rd International Conference on the Theory and Applications of Cryptology and Information Security, Hong Kong, China, December 3-7, 2017, Proceedings, Part I 23, pages 660-690. Springer, 2017. URL: https://doi.org/10.1007/978-3-319-70694-8_23.
  10. T-H Hubert Chan, Jonathan Katz, Kartik Nayak, Antigoni Polychroniadou, and Elaine Shi. More is less: Perfectly secure oblivious algorithms in the multi-server setting. In Advances in Cryptology-ASIACRYPT 2018: 24th International Conference on the Theory and Application of Cryptology and Information Security, Brisbane, QLD, Australia, December 2-6, 2018, Proceedings, Part III 24, pages 158-188. Springer, 2018. URL: https://doi.org/10.1007/978-3-030-03332-3_7.
  11. Hao Chen, Ilaria Chillotti, and Ling Ren. Onion ring oram: Efficient constant bandwidth oblivious ram from (leveled) tfhe. In Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, pages 345-360, 2019. URL: https://doi.org/10.1145/3319535.3354226.
  12. Victor Costan and Srinivas Devadas. Intel SGX explained. IACR Cryptol. ePrint Arch., page 86, 2016. URL: http://eprint.iacr.org/2016/086.
  13. Ronald Cramer, Ivan Damgård, and Yuval Ishai. Share conversion, pseudorandom secret-sharing and applications to secure computation. In Joe Kilian, editor, Theory of Cryptography, Second Theory of Cryptography Conference, TCC 2005, Cambridge, MA, USA, February 10-12, 2005, Proceedings, volume 3378 of Lecture Notes in Computer Science, pages 342-362. Springer, Springer, 2005. URL: https://doi.org/10.1007/978-3-540-30576-7_19.
  14. Ivan Damgård and Jesper Buus Nielsen. Universally composable efficient multiparty computation from threshold homomorphic encryption. In Annual international cryptology conference, pages 247-264. Springer, 2003. URL: https://doi.org/10.1007/978-3-540-45146-4_15.
  15. Srinivas Devadas, Marten van Dijk, Christopher W Fletcher, Ling Ren, Elaine Shi, and Daniel Wichs. Onion oram: A constant bandwidth blowup oblivious ram. In Theory of Cryptography: 13th International Conference, TCC 2016-A, Tel Aviv, Israel, January 10-13, 2016, Proceedings, Part II 13, pages 145-174. Springer, 2016. URL: https://doi.org/10.1007/978-3-662-49099-0_6.
  16. Sky Faber, Stanislaw Jarecki, Sotirios Kentros, and Boyang Wei. Three-party ORAM for secure computation. In International Conference on the Theory and Application of Cryptology and Information Security, pages 360-385. Springer, 2015. URL: https://doi.org/10.1007/978-3-662-48797-6_16.
  17. Brett Hemenway Falk, Daniel Noble, and Rafail Ostrovsky. 3-party distributed ORAM from oblivious set membership. In International Conference on Security and Cryptography for Networks, pages 437-461. Springer, 2022. URL: https://doi.org/10.1007/978-3-031-14791-3_19.
  18. Jun Furukawa, Yehuda Lindell, Ariel Nof, and Or Weinstein. High-throughput secure three-party computation for malicious adversaries and an honest majority. In Jean-Sébastien Coron and Jesper Buus Nielsen, editors, Advances in Cryptology - EUROCRYPT 2017 - 36th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Paris, France, April 30 - May 4, 2017, Proceedings, Part II, volume 10211 of Lecture Notes in Computer Science, pages 225-255. Springer, 2017. URL: https://doi.org/10.1007/978-3-319-56614-6_8.
  19. Oded Goldreich. Towards a theory of software protection and simulation by oblivious RAMs. In Proceedings of the nineteenth annual ACM symposium on Theory of computing, pages 182-194, 1987. URL: https://doi.org/10.1145/28395.28416.
  20. Oded Goldreich, Silvio Micali, and Avi Wigderson. How to play any mental game, or a completeness theorem for protocols with honest majority. In Providing Sound Foundations for Cryptography: On the Work of Shafi Goldwasser and Silvio Micali, pages 307-328. ACM, 2019. URL: https://doi.org/10.1145/3335741.3335755.
  21. Oded Goldreich and Rafail Ostrovsky. Software protection and simulation on oblivious RAMs. Journal of the ACM (JACM), 43(3):431-473, 1996. URL: https://doi.org/10.1145/233551.233553.
  22. Michael T Goodrich and Michael Mitzenmacher. Privacy-preserving access of outsourced data via oblivious RAM simulation. In International Colloquium on Automata, Languages, and Programming, pages 576-587. Springer, 2011. URL: https://doi.org/10.1007/978-3-642-22012-8_46.
  23. Yuval Ishai, Eyal Kushilevitz, Steve Lu, and Rafail Ostrovsky. Private large-scale databases with distributed searchable symmetric encryption. In Kazue Sako, editor, Topics in Cryptology - CT-RSA 2016 - The Cryptographers' Track at the RSA Conference 2016, San Francisco, CA, USA, February 29 - March 4, 2016, Proceedings, volume 9610 of Lecture Notes in Computer Science, pages 90-107. Springer, Springer, 2016. URL: https://doi.org/10.1007/978-3-319-29485-8_6.
  24. Stanislaw Jarecki and Boyang Wei. 3PC ORAM with low latency, low bandwidth, and fast batch retrieval. In Applied Cryptography and Network Security: 16th International Conference, ACNS 2018, Leuven, Belgium, July 2-4, 2018, Proceedings 16, pages 360-378. Springer, 2018. URL: https://doi.org/10.1007/978-3-319-93387-0_19.
  25. Ilan Komargodski and Wei-Kai Lin. A logarithmic lower bound for oblivious ram (for all parameters). In Advances in Cryptology-CRYPTO 2021: 41st Annual International Cryptology Conference, CRYPTO 2021, Virtual Event, August 16-20, 2021, Proceedings, Part IV 41, pages 579-609. Springer, 2021. URL: https://doi.org/10.1007/978-3-030-84259-8_20.
  26. Eyal Kushilevitz, Steve Lu, and Rafail Ostrovsky. On the (in)security of hash-based oblivious RAM and a new balancing scheme. In Yuval Rabani, editor, Proceedings of the Twenty-Third Annual ACM-SIAM Symposium on Discrete Algorithms, SODA 2012, Kyoto, Japan, January 17-19, 2012, pages 143-156. SIAM, 2012. URL: https://doi.org/10.1137/1.9781611973099.13.
  27. Kasper Green Larsen and Jesper Buus Nielsen. Yes, there is an oblivious RAM lower bound! In Annual International Cryptology Conference, pages 523-542. Springer, 2018. URL: https://doi.org/10.1007/978-3-319-96881-0_18.
  28. Kasper Green Larsen, Mark Simkin, and Kevin Yeo. Lower bounds for multi-server oblivious RAMs. In Theory of Cryptography: 18th International Conference, TCC 2020, Durham, NC, USA, November 16-19, 2020, Proceedings, Part I 18, pages 486-503. Springer, 2020. URL: https://doi.org/10.1007/978-3-030-64375-1_17.
  29. Sven Laur, Jan Willemson, and Bingsheng Zhang. Round-efficient oblivious database manipulation. In Xuejia Lai, Jianying Zhou, and Hui Li, editors, Information Security, 14th International Conference, ISC 2011, Xi'an, China, October 26-29, 2011. Proceedings, volume 7001 of Lecture Notes in Computer Science, pages 262-277. Springer, Springer, 2011. URL: https://doi.org/10.1007/978-3-642-24861-0_18.
  30. Yehuda Lindell. How to simulate it - A tutorial on the simulation proof technique. Electron. Colloquium Comput. Complex., TR17-112:277-346, 2017. URL: https://eccc.weizmann.ac.il/report/2017/112.
  31. Steve Lu and Rafail Ostrovsky. Distributed oblivious RAM for secure two-party computation. In Theory of Cryptography Conference, pages 377-396. Springer, 2013. URL: https://doi.org/10.1007/978-3-642-36594-2_22.
  32. Daniel Noble, Brett Hemenway Falk, and Rafail Ostrovsky. MetaDORAM: Info-theoretic distributed ORAM with less communication. IACR Cryptol. ePrint Arch., page 11, 2024. URL: https://eprint.iacr.org/2024/011.
  33. Rafail Ostrovsky. An efficient software protection scheme. In Advances in Cryptology - CRYPTO '89, 9th Annual International Cryptology Conference, Santa Barbara, California, USA, August 20-24, 1989, Proceedings. Springer, 1989. URL: https://doi.org/10.1007/0-387-34805-0_55.
  34. Rafail Ostrovsky. Efficient computation on oblivious RAMs. In Proceedings of the twenty-second annual ACM symposium on Theory of computing, pages 514-523, 1990. URL: https://doi.org/10.1145/100216.100289.
  35. Rafail Ostrovsky and Victor Shoup. Private information storage (extended abstract). In Frank Thomson Leighton and Peter W. Shor, editors, Proceedings of the Twenty-Ninth Annual ACM Symposium on the Theory of Computing, El Paso, Texas, USA, May 4-6, 1997, pages 294-303. ACM, 1997. URL: https://doi.org/10.1145/258533.258606.
  36. Sarvar Patel, Giuseppe Persiano, Mariana Raykova, and Kevin Yeo. PanORAMa: Oblivious RAM with logarithmic overhead. In 2018 IEEE 59th Annual Symposium on Foundations of Computer Science (FOCS), pages 871-882. IEEE, 2018. URL: https://doi.org/10.1109/FOCS.2018.00087.
  37. Giuseppe Persiano and Kevin Yeo. Limits of breach-resistant and snapshot-oblivious rams. In Annual International Cryptology Conference, pages 161-196. Springer, 2023. URL: https://doi.org/10.1007/978-3-031-38551-3_6.
  38. Benny Pinkas and Tzachy Reinman. Oblivious RAM revisited. In Advances in Cryptology-CRYPTO 2010: 30th Annual Cryptology Conference, Santa Barbara, CA, USA, August 15-19, 2010. Proceedings 30, pages 502-519. Springer, 2010. URL: https://doi.org/10.1007/978-3-642-14623-7_27.
  39. Adithya Vadapalli, Ryan Henry, and Ian Goldberg. Duoram: A bandwidth-efficient distributed ORAM for 2- and 3-party computation. In Joseph A. Calandrino and Carmela Troncoso, editors, 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, pages 3907-3924. USENIX Association, 2023. URL: https://www.usenix.org/conference/usenixsecurity23/presentation/vadapalli.
  40. Andrew Chi-Chih Yao. Protocols for secure computations (extended abstract). In 23rd Annual Symposium on Foundations of Computer Science, Chicago, Illinois, USA, 3-5 November 1982, pages 160-164. IEEE Computer Society, 1982. URL: https://doi.org/10.1109/SFCS.1982.38.
  41. Kevin Yeo. Cuckoo hashing in cryptography: Optimal parameters, robustness and applications. In Helena Handschuh and Anna Lysyanskaya, editors, Advances in Cryptology - CRYPTO 2023 - 43rd Annual International Cryptology Conference, CRYPTO 2023, Santa Barbara, CA, USA, August 20-24, 2023, Proceedings, Part IV, volume 14084 of Lecture Notes in Computer Science, pages 197-230. Springer, 2023. URL: https://doi.org/10.1007/978-3-031-38551-3_7.
Any Issues?
X

Feedback on the Current Page

CAPTCHA

Thanks for your feedback!

Feedback submitted to Dagstuhl Publishing

Could not send message

Please try again later or send an E-mail
© 2023-2025 Schloss Dagstuhl – LZI GmbH About DROPS Imprint Privacy Contact