Confidential databases (CDBs) are essential for enabling secure queries over sensitive data in untrusted cloud environments using confidential computing hardware. While adoption is growing, widespread deployment is hindered by high performance overhead from frequent synchronous cryptographic operations, which causes significant computational and memory bottlenecks. We present FEDB, a novel CDB design that removes cryptographic operations from the critical path. FEDB leverages crypto-free mappings, which maintain data-independent identifiers within the database while securely mapping them to plaintext secrets in a trusted domain. This paradigm shift reduces the runtime overhead by up to 78.0 times on industry-standard benchmarks including TPC-C and TPC-H.

翻译：机密数据库（CDBs）对于在不可信云环境中使用机密计算硬件对敏感数据进行安全查询至关重要。尽管其应用日益普及，但频繁的同步加密操作带来的高性能开销（导致显著的计算和内存瓶颈）阻碍了其广泛部署。我们提出FEDB，一种将加密操作从关键路径中移除的新型CDB设计。FEDB利用无密码映射，在数据库内维护数据独立的标识符，同时将其安全映射到可信域中的明文秘密。这一范式转变将运行时开销降低了最多78.0倍（基于TPC-C和TPC-H等行业标准基准测试）。