1. Scalable Encrypted Verifiable Search
Progress Update
Daniel Intskirveli & Johannes Christ

2. Progress Command line interactive search tool
Server rewrite: Java → Scala
Search protocol implementation
Login/sign-up flow polish
Database schema optimization (3NF, indexes)
Lots of bug fixes in databases generation code:
Serialization from big integer to byte array and back
Authenticated set edge cases
Authenticated set bucketing

3. Search protocol Client Server Authentication request
Use auth. token for communication
Stage 1: query authenticated word set
Verify word set
Stage 2: query tag set
Verify tags
(exit for single-word searches)
Stage 3: query cross tag set
Verify cross tags
List results with matches.
Request for end of session
Verify credentials, send auth. Token
Create search session (UUID)
Store search token as well as public/shared keys retrieved from database
Query word set and send result
Retrieve tags for search token, store them
Send tags for verification
Query cross tag set.
For found tags, find document name.
Send cross tags and document names.
Destroy session for user’s search session cookie.

4. Search demo Database generated with small excerpts from:
1984, George Orwell
Alice’s Adventures in Wonderland, Lewis Carroll
Inaugural address, John F. Kennedy
The Corps, and The Corps, and The Corps, Douglass MacArthur
Slaughterhouse-Five, Kurt Vonnegut
A Tale of Two Cities, Charles Dickens
20,000 Leagues Under The Sea, Jules Verne
I Have a Dream, Martin Luther King

5. Server Signup/Login Flow (Demo)
API Authentication
User provides
Send credentials to /auth endpoint, receive authentication token as response
User receives sign-up link via
User enters details
Server finds Gravatar
Token can be used for subsequent API calls
Login
User enters credentials
Reset Password
Credentials are sent to server (password is bcrypt32 hashed + salted)
Enter
Receive link via
Enter new password
User reaches home page

6. //TODO Client application Package server for deployment (RPM)
Search UI
Third-party data requests
Package server for deployment (RPM)
Non-MR database generation for small datasets
Ability to opt-out of auth. set generation (less secure but faster + mutable database)
Move to serialization with cross-platform support

7. Thanks!
Questions?