Cloud Storage Encryption with Cryptomator
summary
Open-source Cryptomator transparently encrypts files before sync and encrypts file names as well as contents, breaking files into 32 KB chunks encrypted with AES‑CTR plus HMAC and using a deterministic SIV mode for names. Key derivation moves from PBKDF2 to scrypt to slow brute force to millennia on commodity hardware. It mounts a WebDAV virtual drive for on‑the‑fly encryption, already running on desktop and beta iOS (Touch ID), works with Dropbox/Drive/OneDrive/iCloud, and the demo successfully uploads and decrypts files.
AI-written summary · about
chapters (25)
- 0:00Introduction
- 0:46Cloud storage services
- 5:51How Cryptomator works
- 8:42Why open source
- 11:28Marketing web pages
- 18:18Key derivation
- 22:08Social engineering
- 25:32Privacy
- 26:40Desktop vs Mobile
- 30:14What has to be done
- 31:13Whats next
- 33:39Demo
- 38:24Get Cryptomator
- 38:57Questions
- 39:31Audit
- 42:44Master key
- 43:39Command line application
- 44:52File names
- 46:10Offline access
- 47:13Search capabilities
- 48:54Sharing walls
- 49:59Integration with Openstack
- 50:43File system limitations
- 53:58Huge files
- 55:09File size obfuscation
related talks
43mSecure Storage and Sharing of Large Files
34mToward Secure and Convenient Browsing Data Management in the Cloud
30mTrust No One: Secure Storage With Confidential Containers
34mEncrypting Data in the Browser - Exploring Web Crypto APIs
57mFaux Disk Encryption: Realities of Secure Storage On Mobile Devices
47mEnd-to-end Encryption in Cloud Services
21mTimeCrypt: Encrypted Data Stream Processing at Scale with Cryptographic Access Control
23mKeeping secrets with JavaScript