4 ms·
Fyi: https://spideroak.com/manual/zero-knowledge-explained/ https://spideroak.com/manual/zero-knowledge-explained/ Its local encryption then copies the resulti
by fweespee_ch 11y ago
Fyi: https://spideroak.com/manual/zero-knowledge-explained/ https://spideroak.com/manual/zero-knowledge-explained/
Its local encryption then copies the resulting blob to SpiderOak. Lose your password, lose your ability to decrypt as you need it to decrypt locally.
- CiPHPerCoder 11y agoYeah, I know. Both services offer that. Bytejail uses X25519 + Xsalsa20Poly1305. SpiderOak uses RSA-2048 + AES-256. (Is it AES-256-CTR + HMAC-SHA2 or is it AES-256-GCM? That page doesn't specify.) Bytejail uses scrypt. SpiderOak uses PBKDF2-SHA256 with 16384 iterations. My earlier comment was saying: Bytejail uses TahoeLAFS on the backend after receiving encrypted blobs. SpiderOak uses ________? Again, to clarify: This isn't a crticism of SpiderOak. I just literally don't know what they are doing from the pages people have linked to in this thread.
- Freaky 11y agohttps://spideroak.com/features/private-by-design https://spideroak.com/features/private-by-design - "SpiderOak uses AES256 in CFB mode and HMAC-SHA256."
- CiPHPerCoder 11y agoThanks. Not sure how I feel about CFB but that did answer one of the two big questions the other page didn't. :)