Sat 10 Oct 22:41
icloud drive
google drivehi. here’s exactly how it works.
your files and their names are locked with aes-256-gcm before they leave your mac. keys come from hkdf-sha256, and new devices pair with p-256 ecdh. on the mac that’s apple’s cryptokit, on the web the browser’s own webcrypto. no extra crypto libraries.
your account has one master key. every file version gets its own random key, and our server only keeps that key locked with your master key.
files are locked in 1 mib pieces, each tied to its place in the file, so nobody can swap, reorder or cut pieces without it showing. it’s also why videos still skip instantly.
names stay unique in a folder through a keyed fingerprint (hmac-sha256). we never see the name.
your recovery key is 52 characters. we keep your master key only locked with it. lose every key and nobody can open your files, us included.
what we can see: file sizes, dates, how many files, which file is in which folder, your email, your plan and your internet address.
you can turn end-to-end encryption off in settings. files are then encrypted on the way and at rest, with keys we hold.