Really nice utility. More developers should dip their toes into crypto and develop applications like this. :) A comment in the code about why it's OK in your c

Really nice utility. More developers should dip their toes into crypto and develop applications like this. :) A comment in the code about why it's OK in your case to use the same key for MAC and encrypt would be useful. I think you're fine. See here: http://security.stackexchange.com/questions/37880/why-cant-i-use-the-same-key-for-encryption-and-mac http://security.stackexchange.com/questions/37880/why-cant-i... I needed to implement deduplication in my system. Since I controlled the server, I developed a slightly more elaborate system which doesn't have the limitation of a predictable IV (predictable from the encryption key). So in my system, I derive two keys from the same passphrase (PBKDF2 with different salts). I encrypt as usual with unpredictable IVs. When uploading, the HMAC of the plaintext and SHA-256 of the ciphertext are both loaded. To check for duplication, the client asks if a certain HMAC is already present. And it's an error (at the server) to upload multiple ciphertexts with the same HMAC.