{"id":18751,"date":"2021-06-24T00:08:43","date_gmt":"2021-06-24T00:08:43","guid":{"rendered":"https:\/\/www.esecurityplanet.com\/?p=18751"},"modified":"2021-06-24T00:14:10","modified_gmt":"2021-06-24T00:14:10","slug":"homomorphic-encryption-makes-real-world-gains","status":"publish","type":"post","link":"https:\/\/www.esecurityplanet.com\/compliance\/homomorphic-encryption-makes-real-world-gains\/","title":{"rendered":"Homomorphic Encryption Makes Real-World Gains, Pushed by Google, IBM, Microsoft"},"content":{"rendered":"

The increasing mobility of data, as it ping-pongs between clouds, data centers and the edge, has made it an easier target of cybercrime groups, which has put a premium on the encryption<\/a> of that data in recent years.<\/p>\n

Cybersecurity vendors have stepped up, developing strong and efficient ways to encrypt data both while it\u2019s at rest and when it\u2019s in transit. However, there is a glaring weakness. When the data is being processed, analyzed or used by applications in another way, it needs to be unencrypted, making it more vulnerable to attack.<\/p>\n

To counter this, some major IT vendors are pushing forward with a decades-old encryption idea that was first talked about in the late 1970s but not successfully demonstrated for the first time until 2009. Since then, interest in fully homomorphic encryption (FHE) has increased, largely paralleling the rise of cloud computing.<\/p>\n

Putting a Focus on FHE<\/h2>\n

FHE enables data to remain encrypted even as it is processed and analyzed, whether that\u2019s in the cloud or in third-party environments. The data is protected against cybercriminals as well as others who are not supposed to see it. Once the mathematical operations, such as calculations, are run on the encrypted data, the results are decrypted and corrected.<\/p>\n

In recent months, the list of interested vendors has included IBM, which in December announced its Security Homomorphic Encryption Services, a managed offering hosted on the IBM Cloud. Big Blue has been active in the development for years \u2013 it was an IBM researcher who ran the 2009 demonstration \u2013 and earlier last year conducted successful FHE field trials. The company also released an FHE toolkit for Apple\u2019s MacOS and iOS operating systems, with Android and Linux being added later.<\/p>\n

\u201cFully homomorphic encryption holds tremendous potential for the future of privacy and cloud computing, but businesses must begin learning about and experimenting with FHE before they can take full advantage of what it has to offer,\u201d IBM Security CTO Sridhar Muppidi said in a statement<\/a> at the time.<\/p>\n

Microsoft\u2019s SEAL (Simple Encrypted Arithmetic Library) is another such effort, an open-source software library created by researchers at the company that uses multiple forms of homomorphic encryption. It\u2019s available on GitHub.<\/p>\n

DARPA Gets In on the Effort<\/h2>\n

Intel, which has been adding security features to its silicon for years and has been working on FHE techniques, was picked earlier this year by the federal Defense Advanced Research Projects Agency (DARPA) to work with Microsoft to create an ASIC chip for homomorphic encryption. DARPA will use the accelerator in DARPA\u2019s Data Protection in Virtual Environments (DRPIVE<\/a>) program to create the hardware needed to reduce the compute power and time that currently is required to run FHE operations. Intel will lead one of four research teams; the other three will be headed by software makers Duality Technologies \u2013 which uses homomorphic encryption in its Duality SecurePlus platform \u2013 and Galois and a Silicon Valley-based nonprofit scientific research institute, SRI International.<\/p>\n

Earlier this month, Google released a collection of open-source libraries<\/a> that can be used to implement FHE in modern workloads and made them available on GitHub.<\/p>\n

\u201cAs cloud computing services continue to see widespread adoption, it becomes increasingly important for service providers to guarantee the security and privacy of the data of their customers,\u201d Google researchers wrote in a paper<\/a> released on GitHub.<\/p>\n

Further reading<\/strong>: Best Encryption Software & Tools<\/a><\/p>\n

Homomorphic Encryption a Long Time Coming<\/h2>\n

The FHE demo in 2009 proved the technology could work, but it was too slow and consumed too much compute power to be put to use and it was too expensive and required expertise in cryptography. However, such challenges are being addressed.<\/p>\n

\u201cFortunately, over the last few years, FHE has become less computationally intensive, due to significant progress in hardware acceleration, efficient optimizations, and low-level implementations,\u201d the Google researchers wrote.<\/p>\n

Still, they added, for adoption of FHE to be widespread, tools are needed to enable software developers without cryptographic expertise to integrate homomorphic encryption into their applications. Dirk Schrader, global vice president of security research at New Net Technologies, agreed. He said a hurdle will be the application of FHE \u201cwhere the analytics of large data sets will be used for benchmarking individuals, as seen in all those fitness applications or health monitors. Consumerization has the intrinsic tendency to include the question of cost of operation and maintenance, and applying high-end cryptography requires solid knowledge and development skills.\u201d<\/p>\n

Digital Health Projects to Benefit<\/h2>\n

Despite the remaining hurdles, Google, IBM, Microsoft and others are pushing to make it easier for developers to leverage the technology. Bringing FHE to the point where it could be used by vendors and developers would be helpful to organizations in a range of industries, Schrader, whose company makes cybersecurity and compliance software, told eSecurity Planet<\/em>.<\/p>\n

FHE \u201ccan solve some of the pressing issues arising out of the conflict to analyze large sums of data points generated by many individuals,\u201d he said. \u201cMany countries are considering some kind of digital health initiatives, where the promise to find better cures is countered by the fear [of losing] privacy. [Homomorphic encryption] offers an interesting approach here by allowing the analysis of encrypted data for purposes that are not related to an individual data set.\u201d<\/p>\n

Other possible uses include autonomous public transportation analyzing users\u2019 locations to predict the load in a highly populated urban area, he said, adding that big data \u201cis based on the promise to distill previously undiscovered opportunities from large amounts of data and has, so far with good reason, earned criticism from data privacy advocates.\u201d<\/p>\n

A Small but Growing Market<\/h2>\n

The FHE market is small but expected to grow in the coming years, with market research firm The Insight Partners predicting<\/a> it will increase from $120.12 million in 2019 to $246.29 million by 2027, an average of 9.7 percent a year. Most of the use will be in North America and Europe, though the Asia-Pacific region stands to see the fastest growth. IBM noted that Gartner forecasts that while currently fewer than 1 percent of companies have the budget for projects that include FHE, that number will be more than 20 percent by 2025.<\/p>\n

All this is happening as businesses increasingly adopt hybrid cloud and multi-cloud strategies. In its annual State of the Cloud report, IT management software maker Flexera found that 92 percent of enterprises have embraced a multi-cloud environment and 80 percent have hybrid clouds. Meanwhile, the number of government regulations and standards, such as the European Union\u2019s General Data Protection Regulation (GDPR)<\/a> and California\u2019s Consumer Privacy Act (CCPA)<\/a>, are putting growing pressure on enterprises to ensure that the data they collect, store, analyze and act on, is protected from bad actors and prying eyes. Being able to leverage FHE would give them another tool to use to do just that.<\/p>\n

Further reading<\/strong>: Disk vs File Encryption: Which Is Best for You?<\/a><\/p>\n\n\n

\n \n\n \n\n
\n \n <\/path>\n <\/svg>\n <\/div>\n \n
\n
\n

\n Get the Free Cybersecurity Newsletter <\/h3>\n \n \n

\n Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices. Delivered every Monday, Tuesday and Thursday <\/p>\n <\/div>\n\n

\n
\n \n Email Address\n <\/label>\n \n <\/div>\n\n
\n
\n \n \n By signing up to receive our newsletter, you agree to our Terms of Use and Privacy Policy. You can unsubscribe at any time. <\/label>\n <\/div>\n <\/div>\n \n