Analyse the security of your master key in the case of 2 of the 3 clouds collude to derive your master key and propose a way to enhance the security of your master key recovery solution.
In AWS, client-side encryption is the act of encrypting data before sending it to Amazon S3. To enable client-side encryption, you have the following options: (1) Use a customer master key (CMK) stored in AWS Key Management Service (AWS KMS); (2) Use a master key that you store within your application. To protect your data privacy against the cloud, it is better to use your master key that you store within your application. However, if you lost your master key, you would be able to decrypt the encrypted data stored in Amazon S3.
Suppose that you decide to use Shamir’s secret sharing scheme for your master key recovery. Shamir's Secret Sharing is an
Following Shamir’s secret sharing scheme, suppose that you divide your 128-bit master key into 4 parts, storing 3 parts in three different clouds and keeping one part with your computer as shown in Figure 1. If you lost your master key, you should be able to recover it with any 3 parts.
Q) Analyse the security of your master key in the case of 2 of the 3 clouds collude to derive your master key and propose a way to enhance the security of your master key recovery solution.
Trending now
This is a popular solution!
Step by step
Solved in 4 steps
