Uma análise de desempenho de funções de encriptação nativas de SGDBs Open Source

• Andre de Souza Rosa CEFET-RJ
• Nilson M. Lazarin CEFET-RJ

DOI: https://doi.org/10.5753/sbseg_estendido.2023.233641

Abstract

Given the growing need for security in digital environments, global legislation has emerged to regulate, among other things, data storage. However, security measures impact system performance, causing greater slowdowns and resource consumption. This study evaluates the performance of encryption functions in three Open Source Database Management Systems, MariaDB, PostgreSQL and Firebird, with different workloads. Metrics such as average execution time, average CPU usage and average RAM consumption were considered. Taking into account the results obtained and the security provided by the supported operation modes, PostgreSQL is indicated as the best option.

References

Carturan, S., Matsui, B., and Goya, D. (2022). LGPD Framework: An implementation and compliance guide for technology areas. In Anais do XLIX Seminário Integrado de Software e Hardware, pages 176–187, Porto Alegre, RS, Brasil. SBC. [link].

Cidadania, M. d. (2021). Princípios da LGPD. Disponível em: [link]. Acessado em 9 de Agosto de 2022.

Detomini, R. C. (2010). Exploração de paralelismo em criptografia utilizando GPUs. SJR Preto, Universidade Julio de Mesquita Filho.

Dworkin, M. J. (2001). Sp 800-38a 2001 edition. recommendation for block cipher modes of operation: Methods and techniques. Technical report, Gaithersburg, MD, USA.

Firebird (2023). 8.11 Cryptographic Functions. [link].

Istifan, S. and Makovac, M. (2022). Performance benchmarking of data-at-rest encryption in relational databases. [link].

Kilonzo, A. M. (2020). Impact of Symmetric-Key Encryption on Performance of Relational and Nosql Database to Preserve Data Confidentiality. PhD thesis, United States International University-Africa.

Lazarin, N. M. and Xexéo, J. A. M. (2014). Reconhecimento de padrões em criptogramas. Revista Militar de Ciência e Tecnologia, v. 31(n. 2):26–43.

Lima, A. P. d., Xexéo, J. A. M., and Gomes, P. R. (2009). Novas formas de ataques de distinção a cifradores: caminhos para o futuro. Revista Militar de Ciência e Tecnologia, v. 26(n. 2):12–17.

Pitta, P. E. B., Costa, E., de Siqueira, J. P. L., and Lazarin, N. M. (2020). LGPD Compliance: A security persistence data layer. In Anais da XVIII Escola Regional de Redes de Computadores, pages 123–127, Porto Alegre, RS, Brasil. SBC. https://doi.org/10.5753/errc.2020.15200.

PostgreSQL (2023). PostgreSQL: Documentation: 15: F.28. pgcrypto. Disponível em: [link]. Acessado em 14 de junho de 2023.

Shastri, S., Banakar, V., Wasserman, M., Kumar, A., and Chidambaram, V. (2019). Understanding and benchmarking the impact of gdpr on database systems. arXiv preprint arXiv:1910.00728.

Stallings, W. (2015). Criptografia e segurança de redes: princípios e práticas. Pearson Education do Brasil, São Paulo, 6 edition.