I am trying to find a good way to combine Owncloud with client-side encryption. Ideally, the requirements are:

  1. encryption relatively transparent (mostly text/.odt files) and cross-platform (Win, OS X, Linux)
  2. file-level encryption (so that versioning/backup still works)
  3. ideally files can be viewed server-side with a key (this will require a new owncloud plugin)
  4. sharing of files possible (ideally with multiple keys)

So far I have looked at:

  1. encfs, however, it is weak if an attacker has multiple versions of the cyphertext so is out.
  2. GnuPG looks more secure and definitely better for sharing, however, it's not so easy to do on-the-fly encryption like encfs does
  3. ecryptfs looks like a non-starter as it's linux only and would require monolithic files to be backed up.

Are there any suggestions for a way to use GnuPG so that it is relatively transparent to the user. Ideally it would be good to have a similar mechanism to encfs, in which a folder is created and all files put in that folder are encrypted with the appropriate sharing permissions. It would be best if files were stored individually (I know this leaks some info but also allows for owncloud versioning to work). Then the encrypted folder is synced to owncloud (and it shouldn't be too hard to write a GnuPG decrypt plugin for owncloud eventually)

  • 1
    "files can be viewed server-side with a key" - then you are losing most of the security benefits of encrypting client side. – symcbean Dec 23 '15 at 13:58
  • You're right, this would certainly compromise security but in some cases may be a feature requested by users with the appropriate caveats. I'm familiar to some degree with the arguments about it being very difficult/impossible to secure things properly once the browser is exchanging key data with the server. – FGiorlando Dec 24 '15 at 22:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.