cryptomator

Cryptomator

Multiplatform transparent client-side encryption of your files in the cloud.

If you want to take a look at the current beta version, go ahead and get your copy of cryptomator on Cryptomator.org or clone and build Cryptomator using Maven (instructions below).

Features

• Totally transparent: Just work on the encrypted volume, as if it was an USB drive
• Works with Dropbox, OneDrive (Skydrive), Google Drive and any other cloud storage, that syncs with a local directory
• In fact it works with any directory. You can use it to encrypt as many folders as you like
• AES encryption with 256 bit key length
• Client-side. No accounts, no data shared with any online service
• Filenames get encrypted too
• No need to provide credentials for any 3rd party service
• Open Source means: No backdoors. Control is better than trust
• Use as many encrypted folders in your dropbox as you want. Each having individual passwords

Privacy

• 256 bit keys (unlimited strength policy bundled with native binaries - 128 bit elsewhere)
• Scrypt key derivation
• Cryptographically secure random numbers for salts, IVs and the masterkey of course
• Sensitive data is swiped from the heap asap
• Lightweight: Complexity kills security

Consistency

• HMAC over file contents to recognize changed ciphertext before decryption
• I/O operations are transactional and atomic, if the file systems supports it
• Each file contains all information needed for decryption (except for the key of course). No common metadata means no SPOF

Building

Dependencies

• Java 8
• Maven 3
• Optional: OS-dependent build tools for native packaging
• Optional: JCE unlimited strength policy (needed for 256 bit keys)

Building on Debian-based OS

apt-get install oracle-java8-installer oracle-java8-unlimited-jce-policy fakeroot maven git
git clone https://github.com/totalvoidness/cryptomator.git
cd cryptomator/main
git checkout v0.4.0
mvn clean install

License

Distributed under the MIT X Consortium license. See the LICENSE file for more info.