Choose one of the following offered options and click on Next.ĥ. …as well as the End-User Privacy Policy Agreement and click on Next.Ĥ. Open the Setup file which was downloaded and follow the instructions of the Setup Wizard. Visit the page and start the installation by clicking on Download Boxcryptor.Ģ. In case of the latter the provider offers a software-edition meant for private use, one for business related work and a version free of charge.ġ. In order to secure your files with E 2EE using Boxcryptor, you have to install the FAUbox Client as well as Boxcryptor on your device. To secure your Files (with E2EE) using Boxcryptor: Regarding system requirements, the operating systems Windows 7, macOS 10.10, 64-bit Linux-Distribution or newer are needed. Other typical cloud features, such as selective synchronization, will be preserved and supported as well. The software was designed for cloud-storage, therefore each file is encrypted individually and the access to the data can be separated. Of course it's quicker than Python (which is interpreted, not compiled).The following user guide explains how to secure your files in the FAUbox cloud with End-to-End-Encryption (E2EE) using the newest version of Boxcryptor.īoxcryptor is a software offering you to secure your cloud with an additional, user-friendly security layer by locally encrypting the files on your device. But as usual, the ultimate proof of confidence would be to assess that your password is stored anywhere. That means that, without your password, nobody can decrypt your files, even them. So,what is my conclusion?Īgain I'm proud of myself: I've learned Go and this program works!īesides, I can see that Boxcryptor does what their authors says: they have implemented a zero-knowledge solution. Install Go (golang) and the requested modules So always remember your (strong) password, and keep it in a safe place (like KeePass). Secondly: your account passwordĪs a zero-knowledge solution, even with the previous file you won't be able to decrypt anything. This file is very important and need some protection, even if you still need your Boxcryptor account's password to decrypt your files (see below). You need to get a copy of the crypto information stored by Boxcryptor, How to use it? First, get the crown jewels: the crypto keys As a challenge, I wanted to do a decryptor by myself, and because I have no relation with the editor, you have here an independant way of understanding it and to decrypt your files. Like my work, their programs are not really intended to be production-grade programs, but having this source code is a good way to understand how their crypto process works. To prevent this, the editor published a decryptor (in Java and C++) here: But as I've said, you can't audit the code. Of course, the Boxcryptor solution encrypts and decrypts the files on the fly, and seems to work well. Secondly, like every commercial program, you can't access the source code to audit it, and the documentation is often too incomplete for auditing purpose.Īnd, at last, in the unlikely case of the company disapear, or if the executable files are lost or too old to be used, you may want a program to decrypt your files. I wrote a Python version, then a Go version. The best way to do that is to write my own decrypting program. Why this program?īecause I'm paranoid (I'm working in a big european bank as security officer/expert), and I wanted to understand the crypto process of the Boxcryptor solution (zero-knowledge based). What is Boxcryptorīoxcryptor is a commercial software (though you can use it freely with limitations) that encrypts files in the cloud in its largest a acceptance, that means OneDrive (Microsoft), Google Drive, iCloud (Apple), ownCloud, Box, Dropbox, etc.Īll compatibles products are listed here. Single file decryption for Boxcryptor in Go (lang).
0 Comments
Leave a Reply. |