3 ms·
see: convergent encryption The encryption on the client doesn't use a random key. The key is a hash of the unencrypted contents of the file.
by harryh 14y ago
see: convergent encryption
The encryption on the client doesn't use a random key. The key is a hash of the unencrypted contents of the file.
- rayiner 14y agoReading list-ed. Interesting.
- harryh 14y agoThe issue is that you don't get the full benefits of encryption. If you upload the map to the rayiner family treasure that only you have seen you're good. No one else will be able to read it. But if you upload the latest episode of Modern Family and Disney gets ahold of the same rip you used they (if they can get a government to help them out) can see what you did and charge you with copyright infringement (or whatever the appropriate crime would be).
- tptacek 14y agoAfter 3-4 years of high-profile CPA-2 attacks on TLS, .NET, Java, and other systems, you'd think we'd all be a lot more skeeved out about cryptosystems that demand known-plaintexts. There's already an obvious conceptual attack (beyond file confirmation) in naive "convergent encryption", which is that you can leverage small amounts of known plaintext to learn unknown plaintext.