Controlling verification of key-value stores

A method comprising:

• controlling verification of the integrity of data operations over a set of data that is hosted at an untrusted module (UM) by:
• receiving, at a trusted module (TM), a first message indicating a request from a client that shares a cryptographic key with the TM, the request for at least one data operation on the set of data, the request including an authentication portion from the client;
• and
• sending a second message indicating a response to the received request, the response including cryptographic verification information attesting the integrity of the at least one data operation with respect to prior data operations on the set of data.

A system comprising:

• at least one server that includes:
• at least one hardware device processor;
• and
• an untrusted module (UM) that includes a memory storing a set of data, and storing executable instructions that, when executed, cause one or more of the at least one hardware device processor to:
• receive, from a client, a request for at least one data operation on the set of data, the request including an authentication portion;
• receive, from a trusted module (TM), a response to the request, the response including cryptographic verification information attesting the integrity of the at least one data operation with respect to prior data operations on the set of data,
• the TM including a cryptographic key that is shared with the client;
• and
• forward, to the client, the received response to the request.