search

Bartalog / cool-maze

A quick mobile-to-desktop share capability, through matrix barcode
Apache License 2.0
2 stars 6 forks source link

E2EE: round up file size (Android) #407

Open Bartalog opened 5 years ago

Bartalog commented 5 years ago

Keep the exact file size secret, e.g. by padding the data before encryption, to match the next multiple of 100KB.

Bartalog commented 5 years ago

Maybe standard algorithms other than AES/CTR/NoPadding would do this, but be careful as block padding may not be the same concept as data padding.

Bartalog commented 5 years ago

407 and #426 are efforts to keep minimal the amount of information shared with the backend. Having the text messages and the files contents end-to-end encrypted is the main concern, but other "clues" should be addressed as well.