- A file (assume 1 GB in size) is encrypted along with filenames using 7zip into a 7z archive using AES-256
- The file is uploaded to a cloud storage service such as those offered by Google, Amazon, or Microsoft
- The file is downloaded by a peer on a separate network and the peer is offered the password in a secure manner
- I realize that if someone got the password then their job would be easy
- I also realize that the security is only as great as the developer who created 7z made it
- I went through as many similar topics as I could find on here and elsewhere about this and while similar questions have been asked, I don't believe the exact concerns here have been addressed so I hope this is not a duplicate.
- Does using a linux based operation to create such files offer more security than doing so with 7zip on Windows?
- How susceptible would this kind of operation be to an attacker, government agency, etc... seeking to know what the contents of the archive are? Would that middle man need to intercept the entire file in order to potentially gain access to the contents?
- What other flaws may have been overlooked in this approach?
- Are there better alternatives that offer comparably equal ease of implementation?