Prefix Siphoning: Exploiting LSM-Tree Range Filters For Information Disclosure (Full Version)

Adi Kaufman, Moshik Hershcovitch, Adam Morrison

Key-value stores typically leave access control to the systems for which they act as storage engines. Unfortunately, attackers may circumvent such read access controls via timing a…