AEADtiloja

AEADtiloja is a theoretical framework for applying authenticated encryption with associated data (AEAD) to multi-tenant storage systems, where the logical storage units are referred to as tiloja. The name combines the cryptographic AEAD concept with tiloja, a term meaning "spaces" or "rooms" in Finnish, reflecting the partitioned storage model. The framework aims to provide confidentiality and integrity guarantees across tenant boundaries while enabling scalable key management.

Concept and terminology: A tilo represents a discrete storage partition that may hold one or more data tiles. Each tilo is encrypted using an AEAD primitive, with per-tenant keys derived from a common master key via a key derivation function. Nonces are designed to be unique for every tile and operation to prevent nonce reuse, and metadata about the tenant and tilo is incorporated as associated data.

Encryption process: For every tile, plaintext is encrypted with an AEAD algorithm such as AES-GCM or ChaCha20-Poly1305. The associated data includes tenant identifiers, tilo identifiers, and optional metadata that must be authenticated but not necessarily encrypted. The ciphertext comprises the encrypted payload plus an authentication tag that authenticates both the ciphertext and the associated data.

Security properties: AEADtiloja emphasizes tenant isolation through key separation and strict nonce management. By binding metadata to the authentication tag, it protects against tampering with tenant or tilo context. Correct implementation requires careful management of keys, nonces, and potential replay protections.

Implementations and status: As a concept, AEADtiloja is compatible with existing AEAD primitives and standard KDFs. Practical adoption would depend on integration with a sensitive key management service, secure nonce generation, and thorough security auditing. It is described in theoretical contexts and has not become a widely adopted standard.

See also: Authenticated encryption, AEAD, AES-GCM, ChaCha20-Poly1305, key derivation functions, nonce management, tenant isolation.