3 ms·
From: https://www.cipherwill.com/how-it-works https://www.cipherwill.com/how-it-works > Each security factor is represented by a public/private key pair, which
by 201984 2y ago
From: https://www.cipherwill.com/how-it-works https://www.cipherwill.com/how-it-works
> Each security factor is represented by a public/private key pair, which is used to encrypt your data on your device.
So where are the private keys stored? AFAICT, this is just a web app and I know of no way to securely store a private key from one. Even if there is a desktop application and my private key is stored there, what happens if I lose my desktop? Am I locked out of my will permanently?
> Cipherwill uses Homomorphic encryption to encrypt data pods again, creating a "time capsule" key. This key ensures that the data remains encrypted and inaccessible until a specified time.
Is there anything preventing you from releasing these "time capsule" keys ahead of schedule other than good will?
> Data pods are encrypted using 256 or 512 AES encryption
512 AES encryption? Seeing as AES only goes up to 256, you aren't exactly inspiring confidence here.
> If you and your beneficiaries have security factors enabled, it is impossible for anyone, including Cipherwill, to access or decrypt your data.
So it's end-to-end encrypted only if me and my beneficiaries all choose it to be? That is a very different claim from what's on your main page.
Overall, this "how it works" page is too vague for my liking, and I wouldn't trust this website with my will.
- EnthusiastShiv 2y agoThanks for your feedback! Here’s a quick response to your concerns: 1. Private Key Storage: Private keys are derived locally from your security factors when you set up them. 2. Time Capsule Keys: The release of "time capsule" keys is governed by strict protocols, ensuring they’re only accessible at the specified time. 3. AES Encryption: We use AES-256, not 512, will fix that typo. 4. End-to-End Encryption: yes, End-to-end encryption requires both you and your beneficiaries to enable security factors.
- Daviey 2y agoCan you expand on "strict protocols" please?
- EnthusiastShiv 2y ago"strict protocols" refer to our will execution schedule, which ensures that the keys are only accessible after the switch is triggered. Even if someone were to hack the system and access the keys before execution, only the designated beneficiaries would have the ability to decrypt the data.
- crtasm 2y agoWhat exactly is preventing someone with the key decrypting the data before some other code in your system runs?
- EnthusiastShiv 2y agoOnly the people who you've added in your beneficiaries can decrypt the data if Cipherwill is hacked.
- crtasm 2y agoThis is basically saying "trust us" and does not instill confidence in your system.
- EnthusiastShiv 2y agowill definitely fix this
- Daviey 2y agoTo be honest, you've lost confidence from me. The whole thread people have been asking for reassurance and some detail, but it feels like you are intentionally skirting over the detail when asked. I'm sure the product has potential, and lots of effort has gone into it. I also see that criticism is hard, but if you can't be open about these basic questions then there are fundamental problems. I should say, I'm a fan of crypto' (both types) and i'm likely your target market because currently my plans after death are not nearly as secure as i'd like!
- 201984 2y agoThanks for responding! What are these "security factors" you keep mentioning? It's a vague term and I don't see a definition on your website. Can you also describe how private keys are derived from them? That's what I'm most curious about. Is this derivation process something that could be replicated by an attacker?
- EnthusiastShiv 2y agoWe've added a page to explain "What are Security Factors?" https://www.cipherwill.com/how-factors-work https://www.cipherwill.com/how-factors-work