What does AES-256 encrypted storage mean?

Discussion in 'Email Discussions' started by popowich, Jun 4, 2016.

  1. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    8,988
    Likes Received:
    120
    Within the context of the Compare - Encrypted Email Service Providers I was asked:

    It means that a provider can't read OR decrypt the content/attachments of emails stored on its servers.

    An example is SCRYPTmail. SCRYPTmail encrypts user objects and emails with a key provided by the user that never sent to SCRYPTmail, so they can’t decrypt it.
     


  2. kangas

    kangas President at LuxSci.com

    Joined:
    May 14, 2013
    Messages:
    6
    Likes Received:
    6
    "AES-256 encrypted storage" only means that the data is encrypted while at rest using AES-256. As to if the provider can read/decrypt ... that all depends on where the keys are stored. In many cases, providers who use encrypted storage do have the keys ... those keys are just kept securely in a location separate from the data. As popowich mentions, if the keys are never in the hands of the provider, then then provider "can't access the data".

    However, if the encryption is done under the purview of a client-side application made by the provider, then you have to trust that the provider is not and can not use that application to get the keys based on code hidden in there now, or by code that may be introduced by a future software update. (i.e. under government mandate to insert something like how the US FBI wanted Apple to change the software in iPhone through the update channel so that the FBI could break in more easily).

    So -- in most cases, there is some level of trust involved. If you are in full control of the keys yourself and are vetting the software used you can have more assurance of proper privacy.
     

    popowich likes this.

Want to reply or ask your own question?

It only takes a minute to sign up (and it's free!). Click the orange sign up button to choose a username and then you can ask your own questions on the forum.
Loading...