Secure Storage and Sharing of Large Files
summary
A deployed zero-knowledge large-file storage system that performs local encryption/decryption so servers never hold keys. It uses block-by-block encryption to keep memory/CPU constant, stores IVs and an HMAC in a header, wraps per-file keys with Android Keystore, transfers via temporary S3 URLs/credentials, and uses a native library (OpenSSL and Argon2) to standardize and harden algorithms.
AI-written summary · about
chapters (11)
- 0:00Start
- 1:08Let's set some goals
- 1:53The concept of zero-knowledge architecture
- 2:55Methods of classical encryption
- 5:55Encrypting files, not so simple
- 10:29Coroutines and cancellation handling
- 11:58Managing evolutions
- 14:22Synchronization
- 29:36Strengthening security
- 32:26Advantages
- 33:28Disadvantages
related talks
42mEncrypting Files on Android
18mJetpack Security Extension Overview, Data-at-rest and in-transit
50mBuilding Production-Grade End to End Encrypted App...
27mBuilding Zero-Knowledge Backends
23mData Encryption on Android
47mIs a Secured (Web) App Possible?
57mFaux Disk Encryption: Realities of Secure Storage On Mobile Devices
38mZero Knowledge: you can't leak what you don't know