Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Cryptomator's technology meets the latest standards and encrypts both files and filenames with AES and 256 bit key length.

I know you're advertising to slightly less technical users, but please provide some documentation explaining your choices! AES alone doesn't say anything about the mode of operation, which makes or breaks the scheme.

From a little sleuthing, it seems likely that they're using GCM-SIV[1], which is a good choice.

[1]: https://github.com/cryptomator/siv-mode



https://docs.cryptomator.org/en/latest/security/architecture... says AES in CTR mode unless I'm missing something.


Yeah, looks like you're right. SIV is only used to encrypt the "directory hierarchy," whatever that means in this context (why use two different modes?).




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: