Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Librevault: Open source zero-knowledge peer-to-peer file sync

librevault.com

Post reply on HN
Print view View original

11–20 of 31 posts

Re: Librevault: Open source zero-knowledge peer-to-peer file sync

#11

Post by GamePad64 »

skrowl wrote: post #7
ilurkedhere wrote: post #6

Very nice. It seems a lot less janky than Syncthing (web UI, constant process restarts)

SyncTrayzor (windows client implementing synching) is pretty nice. It runs as a tray icon but when you click it, it loads like a native app even though it's a web app (similar to electron)

But it is still a web ui, not a native one. Also, SyncTrayzor itself is not cross-platform, so Linux users have to install syncthing-inotify for watching the directories for changes.

Re: Librevault: Open source zero-knowledge peer-to-peer file sync

#13

Post by swordswinger12 »

Can you describe your file encryption procedure? In the Meta::Chunk class the 'encrypt' function only computes AES-CBC with no MAC, but there are calls to compute_strong_hash at other points in the library. There are references to a (non-cryptographic) Rabin hash as well as SHA2-224 and SHA3-224 in these functions - which is used for ciphertext authenticity and integrity?

Re: Librevault: Open source zero-knowledge peer-to-peer file sync

#14

Post by GamePad64 »

swordswinger12 wrote: post #10
GamePad64 wrote: post #3

Earlier quoted context omitted.

Thank you for advice. This revision of the website is a stub, it does not contain any useful information, just some general words. It will be heavily reworked soon. Also, I will add the comparison table with Syncthing, BTSync and some cloud storages, like Dropbox.

Have you thought about just not using the phrase "zero knowledge" at all?

I don't use it on GitHub page. It updates more frequently than the site. The next revision of the website will contain a new motto, but I have to make a new motto first.

Re: Librevault: Open source zero-knowledge peer-to-peer file sync

#16

Post by GamePad64 »

swordswinger12 wrote: post #13

Can you describe your file encryption procedure? In the Meta::Chunk class the 'encrypt' function only computes AES-CBC with no MAC, but there are calls to compute_strong_hash at other points in the library. There are references to a (non-cryptographic) Rabin hash as well as SHA2-224 and SHA3-224 in these functions - which is used for ciphertext authenticity and integrity?

During the indexing procedure, the value of SHA3-224(AES256(data)) is computed for each chunk.

Then, the list of these hashes is placed into Meta structure. After that, this Meta is ECDSA-signed using a EC point, decoded from A-type secret.

Any other type of secret contain the public part of EC point and can verify the signature.

Re: Librevault: Open source zero-knowledge peer-to-peer file sync

#19

Post by anateus »

Ar-Curunir wrote: post #8

I wish people would stop using the phrase "zero knowledge" willy nilly. It has a specific meaning within cryptography.

Yeah... I kept looking for the way this is ZK. Do they just mean that the files are encrypted on their servers and so they can't read them?

I understand accidentally stepping on a term from an adjacent field, but using it this way for a product that presumably is crypto-centric is a bit of a red flag.

Re: Librevault: Open source zero-knowledge peer-to-peer file sync

#20

Post by GamePad64 »

rwj wrote: post #18

Are there any plans for a headless server. I'm still looking for a good way to sync my NAS to my desktop.

It is headless by design. GUI and synchronization daemon are separate applications, that communicate using the WebSocket protocol. So, you can install your sync daemon to NAS and you are good.

But to let you control the daemon via the net, I am making Web UI, that will enable you to fully control synchronization process from your browser.

Post reply on HN