4 ms·
Sure, this doesn't address the original attack under discussion, but this subthread was about whether deduplication implies that the server has access to the un
by shasta 16y ago
Sure, this doesn't address the original attack under discussion, but this subthread was about whether deduplication implies that the server has access to the unencrypted file.
AES might not be suitable for this purpose, but I don't see why the scheme I proposed is necessarily weak. Do you? Anyway, I agree it's not particularly practical - if you're really concerned about data security, then encrypt before you upload.
- JoachimSchipper 16y agoAs to your scheme - circular encryption probably works fine in practice, but there's no theoretical guarantee. The server cannot read files, but can determine who has uploaded any one cipher- or plaintext. ("Encrypted or unencrypted file".) I think that's still bad.
- extension 16y agoI wonder if it's possible to fix that too -- that is, could the server receive and store encrypted data from a bunch of people without ever knowing who contributed which data?