6 ms·

Let the reader understand. (i.e. They're encrypted in transfer and while stored, but Apple holds the keys: https://qr.ae/pGSHY8 https://qr.ae/pGSHY8, https://m

• danudey 5y ago
  For the lazy: > Each file is broken into chunks and encrypted by iCloud using AES128 and a key derived from each chunk’s contents, with the keys using SHA256. The keys and the file’s metadata are stored by Apple in the user’s iCloud account. The encrypted chunks of the file are stored, without any user-identifying information or the keys, using both Apple and third party storage services—such as Amazon Web Services or Google Cloud Platform—but these partners don’t have the keys to decrypt the user’s data stored on their servers. As far as I can tell, they don't say anything specific about where or how Apple stores the keys and metadata, so it should be assumed that Apple could decrypt your photos if they wanted to.
  • thrashh 5y ago
    End-to-end encryption prevents a third party from reading your content, but if you are getting your encryption software from the same people that are storing your encrypted data, the only thing stopping them from reading your data is corporate policy. Which is fine, because I use iCloud and many other cloud services, but you have to acknowledge the fact.