2

As far as I understand Wuala (so called secure cloud storage) is not using the original (user provided) password to encrypt data so what role does original password play in their system?

I think they are generating a symmetric encryption key and somehow encrypt it with the original password, storing it along with the encrypted data on their servers. The question is how secure that encryption of symmetric key?

2
  • As far as I know it's based on a Cryptree structure. (Google, google) ...see also wualablog.blogspot.de/2011/05/…
    – mkl
    Jun 11, 2013 at 4:08
  • @mkl this is the answer I was looking for, thanks. Could you please write it as a full answer so I could mark it as accepted.
    – Moonwalker
    Jun 11, 2013 at 14:32

2 Answers 2

4

Wuala encryption is based on a Cryptree structure.

For descriptions of different technical depths cf. http://wualablog.blogspot.de/2011/05/wualas-encryption-revisited.html?m=1

3

Actually this done by many implementations of file system encryption, including truecrypt, first of all the key which is generated is significantly longer and complex than your password. The reason why they encrypt the key with your password rather than all files is because if you would change your password, all encrypted files would need to be decrypted first and the reencrypted with your new password. If you use the key for encryption, then you will only need to reencrypted the key with your new password. This has a lot less overhead and is equally secure.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.