Home Encryption

Encryption

Learn how Icedrive ensures the security of your data with robust encryption methods. Explore FAQs about client-side encryption, zero-knowledge privacy, and how we safeguard your files against unauthorized access.

By Tom and 1 other

• 8 articles

What is zero-knowledge, client side encryption?

In cryptography, the principle of zero-knowledge ensures that neither the service provider nor any entity within it can access your encryption keys or data. With client-side encryption, all your data undergoes encryption on your device before being uploaded to Icedrive servers. This ensures exclusive access and decryption capability only for you, preserving the utmost privacy and security of your data. Zero-knowledge encryption is available on all paid plans.

Last updated on May 21, 2024

Can I share encrypted files?

At present, sharing encrypted files isn't available as it would require recipients to possess your secure passphrase for decryption, potentially compromising the integrity of your encrypted data.

Last updated on May 21, 2024

Encrypted Thumbnails/Previews

Previews and thumbnails are limited for files within the Encrypted section due to the encryption process, which ensures enhanced security for your data. Since our servers cannot access or read encrypted files, generating previews and thumbnails requires decryption, which currently isn't feasible. However, our web app supports previewing images, PDF documents, audio, and video files directly within the browser by downloading and decrypting files on your device. As technology evolves, we aim to expand preview features, leveraging advancements to provide a seamless experience for our users.

Last updated on May 21, 2024

How secure are my encrypted files?

Icedrive's encryption offers the utmost security by performing all operations client-side, ensuring that only you have access to your encrypted data. Even if a third-party were to bypass authentication and gain access to the raw encrypted file, decrypting it would pose an incredibly daunting challenge. With Icedrive's 256-bit encryption keys, the number of possible hashes is a staggering 2^256, equating to an astronomical 115 quattuorvigintillion possibilities. To put it into perspective, even the most powerful supercomputers would require hundreds of years to crack such encryption. On standard computers, the task would be virtually insurmountable, taking tens of thousands of years. While hackers are known for their patience, the formidable encryption employed by Icedrive sets a nearly impossible barrier for unauthorized access.

Last updated on May 21, 2024

Icedrive's encryption process explained

Icedrive's encryption process is meticulously designed to ensure maximum security, with all data encryption carried out exclusively on your device before transmission to our servers. The encryption process unfolds in two key stages. Firstly, filenames are encrypted using your unique key, generating an encrypted hex string that's securely stored in our database. Secondly, the files themselves are segmented into small, manageable chunks. Each chunk undergoes a robust encryption process involving 16 rounds of encryption using your 256-bit key, which remains strictly client-side. These encrypted chunks are then securely transmitted to our servers via HTTPS and seamlessly integrated into the encrypted data structure. To maintain integrity, the final chunk is padded with dummy data to meet the block size requirements of Twofish encryption. The outcome is a meticulously encrypted file and filenames, safeguarded against any potential data leaks, and accessible solely by you.

Last updated on May 21, 2024

The twofish encryption algorithm explained

Twofish, conceived by Bruce Schneier and Counterpane Labs in 1998, remains a stalwart in encryption, standing undefeated against all attempts to breach its security. Renowned for its resilience, many cryptographers consider Twofish to surpass the widely adopted Rijndael/AES algorithm in terms of security. This distinction is underscored by the algorithm's utilization of pre-computed key-dependent S-boxes and a sophisticated key schedule. In Twofish, half of an n-bit key serves as the primary encryption key, while the remaining half modifies the encryption algorithm through key-dependent S-boxes. Drawing inspiration from various cryptographic designs, Twofish incorporates elements such as the pseudo-Hadamard transform from the SAFER family of ciphers and a Feistel structure akin to DES. Additionally, Twofish employs a Maximum Distance Separable matrix, enhancing its robustness against potential attacks.

Last updated on May 21, 2024

Reset Encryption Passphrase

To reset your encryption passphrase: 1. Go to your account settings in the web app. 2. Scroll down to find "Reset Encryption Passphrase". 3. Please be aware that resetting your passphrase will erase any data stored in your encrypted section, as it is intrinsically linked to this section.

Last updated on May 21, 2024

Encryption Passphrase.

To access the encrypted section of your Icedrive account, follow these steps: 1. Navigate to Encrypted Section: Log in to your Icedrive account and locate the encrypted section. This will be labeled as "Encrypted" within your account dashboard. 2. Create Encryption Passphrase: Upon accessing the encrypted section for the first time, you'll be prompted to create an encryption passphrase. This passphrase acts as a key to unlock and access your encrypted files securely. 3. Choose a Strong Passphrase: It's crucial to select a passphrase that is both memorable for you and secure against unauthorized access. Avoid using easily guessable information such as birthdays or common names. Instead, opt for a passphrase with a length of 6 to 60 characters, incorporating a mix of letters, numbers, and symbols for added security. Please note that only ASCII characters are accepted; Unicode characters will not work. 4. Remember Your Passphrase: Make sure to remember your encryption passphrase as it will be required to access your encrypted files in the future. 5. Refer to Reset Encryption Passphrase Article: If you've forgotten your encryption passphrase, don't worry. You can refer to our "Reset Encryption Passphrase" article for detailed instructions on how to reset it.

Last updated on May 21, 2024