FHE-SQL: Fully Homomorphic Encrypted SQL Database
Po-Yu Tseng, Po-Chu Hsu, Shih-Wei Liao
Published October 17, 2025
Abstract
FHE-SQL is a privacy-preserving database system that enables secure query processing on encrypted data using Fully Homomorphic Encryption (FHE), providing privacy guaranties where an untrusted server can execute encrypted queries without learning either the query contents or the underlying data. Unlike property-preserving encryption-based systems such as CryptDB, which rely on deterministic or order-preserving encryption and are vulnerable to frequency, order, and equality-pattern inference attacks, FHE-SQL performs computations entirely under encryption, eliminating these leakage channels. Compared to trusted-hardware approaches such as TrustedDB, which depend on a hardware security module and thus inherit its trust and side-channel limitations, our design achieves end-to-end cryptographic protection without requiring trusted execution environments. In contrast to high-performance FHE-based engines-Hermes, which target specialized workloads such as vector search, FHE-SQL supports general SQL query semantics with schema-aware, type-safe definitions suitable for relational data management. FHE-SQL mitigates the high cost of ciphertext space by using an indirection architecture that separates metadata in RocksDB from large ciphertexts in blob storage. It supports oblivious selection via homomorphic boolean masks, multi-tier caching, and garbage collection, with security proven under the Universal Composability framework.
Author comment
12 pages, 1 figures, Keywords: Fully Homomorphic Encryption, Private Information Retrieval, Encrypted Databases, Privacy-Preserving Systems
More in cs.CR
- Understanding the Resource Cost of Fully Homomorphic Encryption in Quantum Federated LearningLukas Böhm, Arjhun Swaminathan, Anika Hannemann +1
- Leveraging ASIC AI Chips for Homomorphic EncryptionJianming Tong, Tianhao Huang, Jingtian Dang +9
- Revisiting Fully Homomorphic Encryption SchemesNimish Jain, Aswani Kumar Cherukuri
- IEEE Big Data Cup 2022: Privacy Preserving Matching of Encrypted Images with Deep LearningVrizlynn L. L. Thing
- Lattices, Homomorphic Encryption, and CKKSVir Pathak