How-to-Build-CryptDB

Site:http://css.csail.mit.edu/cryptdb/

Indruction:(come from source site)

CryptDB

Online applications are vulnerable to theft of sensitive information because adversaries can exploit software bugs to gain access to private data, and because curious or malicious administrators may capture and leak data. CryptDB is a system that provides practical and provable confidentiality in the face of these attacks for applications backed by SQL databases. It works by executing SQL queries over encrypted data using a collection of efficient SQL-aware encryption schemes. CryptDB can also chain encryption keys to user passwords, so that a data item can be decrypted only by using the password of one of the users with access to that data. As a result, a database administrator never gets access to decrypted data, and even if all servers are compromised, an adversary cannot decrypt the data of any user who is not logged in. An analysis of a trace of 126 million SQL queries from a production MySQL server shows that CryptDB can support operations over encrypted data for 99.5% of the 128,840 columns seen in the trace. Our evaluation shows that CryptDB has low overhead, reducing throughput by 14.5% for phpBB, a web forum application, and by 26% for queries from TPC-C, compared to unmodified MySQL. Chaining encryption keys to user passwords requires 11-13 unique schema annotations to secure more than 20 sensitive fields and 2-7 lines of source code changes for three multi-user web applications.


Before install CryptDB on MySQL DB, First you need to make sure your system have following packet, my system is:

Intel:P4 3.0G
Ram :1GB
HD:160GB,5400rpm
OS:Ubuntu 11.10

Step 1 - Check system's packet on last version

open terminal windows(ctrl+alt+t), enter command in

sudo apt-get update
sudo apt-get upgrade

Step 2 - Install following packets

all packet need last version

1.  Bazaar
2.  Bison
3.  Gtk-doc
4.  Autoconf
5.  Automake
6.  Libtool
7.  Flex
8.  Gcc-4.6
9.  G++-4.6
10.Cmake
11. G++

and 

12 . apt-get install liblua5.1-0-dev libntl-dev libmysqlclient-dev \
                    libssl-dev libbsd-dev libevent-dev libglib2.0-dev 
13.  apt-get install \
       pkg-config \
       liblua5.1-0 \
       liblua5.1-dev \
       libevent-dev \
       libevent1  \
       libglib2.0-0 \
       libglib2.0-dev \
       libmysqlclient-dev \

Step 3 - download Program

CryptDB : git clone -b public git://g.csail.mit.edu/cryptdb

MySQL: wget http://es.csail.mit.edu/mysql-5.5.14.tar.gz 

MySQL-proxy: bzr branch lp:mysql-proxy

Step 4 : Start to Build CytptDB on MySQL

 - CytptDB on MySQL(not finish yet) -

※ tar zxf mysql-5.5.14.tar.gz

※ cp -R .../cryptdb/parser/mysql_mods/* mysql-5.5.14/
（you can use "ls -al" check file date if it's change）

※rm mysql-5.5.14/sql/sql_yacc.{cc,h}

※cd mysql-5.5.14

※mkdir build

※cd build

※cmake -DWITH_EMBEDDED_SERVER=ON ..
(it will take few time)

※make
(it will take few time)

Step 5 Build MySQL-Proxy

※bzr branch lp:mysql-proxy

※cd mysql-proxy

※sh ./autogen.sh

※./configure --enable-maintainer-mode --with-lua=lua5.1

※make

※make install

if you fails with error "g_debug_hexdump being undefined"

To Do

*************************************************


% patch -p0 <<"EOM"
=== modified file 'src/Makefile.am'
--- src/Makefile.am 2010-10-28 11:58:51 +0000
+++ src/Makefile.am 2012-01-10 15:49:27 +0000
@@ -23,7 +23,7 @@

 BUILD_CPPFLAGS = $(LUA_CFLAGS) $(MYSQL_CFLAGS) $(GLIB_CFLAGS) $(GMODULE_CFLAGS) $(GTHREAD_CFLAGS)
 BUILD_CFLAGS   = -DLUAEXTDIR="\"$(luaextdir)\""  -DPLUGINDIR="\"$(plugindir)\""
-BUILD_LDADD    = $(GLIB_LIBS) $(GMODULE_LIBS) libmysql-chassis.la $(GTHREAD_LIBS) libmysql-proxy.la
+BUILD_LDADD    = $(GLIB_LIBS) $(GMODULE_LIBS) libmysql-chassis.la libmysql-chassis-glibext.la $(GTHREAD_LIBS) libmysql-proxy.la

 BUILT_SOURCES =
 if USE_WRAPPER_SCRIPT
EOM

*************************************************

Step 6 Install CryptDB


※ cd cryptdb/conf

※open config.mk.sample and change path for MYSRC (MYSRC is set to your mysql folder path) , then save as config.mk <--very important


※cd cryptdb

※make

※sudo make install


Now, you need to check  some ".so" file if it is success to generate

SEE cryptdb/obj folder

it's have six .so file

and then go to cryptdb/obj/udf

you will see edb.so, copy it to /usr/lib/mysql/plugin/


Now, you can see cryptdb/doc/README to run cryptdb

if you have any problem about install cryptdb, I will try to help as I can