Get the latest tech news

End-to-End Encrypted Cloud Storage in the Wild: A Broken Ecosystem

Jonas Hofmann, Kien Tuong Truong. Work to appear at ACM CCS 2024 Cloud storage is ubiquitous: Google Drive, Dropbox, and OneDrive are household names.

We conduct a cryptographic analysis of five major providers in the field, namely Sync, pCloud, Icedrive, Seafile, and Tresorit, in the setting of a malicious server. Icedrive We do not claim that the providers themselves would act maliciously, but rather that, by virtue of the data they store, they are an attractive target for nation-state adversaries and hackers, who would attempt to compromise the server and mount attacks against the users. This is an active research field: other than the previously mentioned analyses of MEGA and Nextcloud, Backendal et al. have recently developed a formal model for E2EE cloud storage, starting the foundations for a more secure ecosystem.

Get the Android app