ACA-SDS : adaptive crypto acceleration for secure data storage in big data

• Main Authors: Xiao, Chunhua, Zhang, Lei, Liu, Weichen, Bergmann, Neil, Li, Pengda
• Other Authors: School of Computer Science and Engineering
• Format: Article
• Language: English
• Published: 2018
• Subjects: Encryption; Hardware-Software Co-design; DRNTU::Engineering::Computer science and engineering
• Online Access: https://hdl.handle.net/10356/88385; http://hdl.handle.net/10220/45763
• Institution: Nanyang Technological University

In the era of Big Data, the demand for secure data storage is rapidly increasing. To accelerate the complex encryption computation, both specific instructions and hardware accelerators are adopted in a large number of scenarios. However, the hardware accelerators are not so effective especially for small volume data due to the induced invocation costs, while the AES-NI (Intel® Advanced Encryption Standard New Instructions) is not so energy efficiency for big data. To satisfy the diversity performance/energy requirements for intensive data encryptions, a collaborative solution is proposed in this work. We proposed a feasible hardware-software co-design methodology based on the stack file system eCryptfs, with QAT (Quick Assist Technology), which is named as ACA-SDS: Adaptive Crypto Acceleration for Secure Data Storage. ACA-SDS is able to choose the optimal encryption solution dynamically according to file operation modes and request characters. Adjustable parameters, such as α, β and M are provided in our scheme to provide a better adaptability and trade-off choices for encryption computation. Our evaluation shows that ACA-SDS can get 15%-25% performance improvement for big-data blocks compared with only software or hardware accelerations. Furthermore, our methodology provides a wide range of practical design concepts for the further research in this field.