cryptomator/cryptomator
Cryptomator
Cryptomator is a client-side cloud encryption tool and cross-platform vault manager. It provides a transparent encryption layer that encrypts files and folder structures locally before they are uploaded to a cloud storage provider.
The software creates virtual encrypted drives that mount encrypted vaults, allowing users to interact with their data as if it were on a physical disk. It supports the management of multiple independent encrypted containers, each protected by a unique password.
The project covers data privacy through directory structure obfuscation and filename encryption to hide metadata from cloud providers. It also implements secure file integrity verification to detect ciphertext changes and ensure data consistency.
Features
- Client-Side Encryption - Provides client-side encryption of file contents and folder structures before they are uploaded to cloud storage.
- Virtual File System Layers - Implements a virtual file system layer to intercept OS calls for transparent on-the-fly encryption and decryption.
- Filename Encryption - Obfuscates directory structures and filenames to prevent cloud providers from analyzing data organization.
- Transparent Encryption Wrappers - Provides a layer that automatically encrypts and decrypts data on the fly between the local system and cloud storage.
- Data Obfuscation Tools - Hides filenames and folder hierarchies to prevent cloud providers from analyzing metadata.
- Encrypted Storage Vaults - Organizes encrypted data into independent, password-protected vaults for remote storage.
- Virtual Encrypted Disks - Creates secure virtual disks to interact with encrypted files as if they were stored on physical hardware.
- Key Derivation Functions - Derives encryption keys from user passwords locally on the device to ensure raw passwords are never transmitted.
- Privacy and Data Protection - Ensures data privacy by keeping decryption keys exclusively on the client's device.
- Storage Encryption - Encrypts files and directories locally before uploading them to cloud services to ensure privacy.
- Authenticated Encryption - Implements authenticated encryption to ensure both confidentiality and the integrity of encrypted files.
- Ciphertext Mapping - Maps the virtual drive's plaintext structure to encrypted files on the host disk for transparent access.
- Integrity Verification - Uses authenticated encryption to detect ciphertext changes and ensure data consistency.
- Vault Managers - Manages multiple independent encrypted containers across Windows, macOS, and Linux.
- Encryption - Listed in the “Encryption” section of the Awesome Mac awesome list.
- Encryption and Privacy - Transparent client-side encryption for cloud-stored files.
- Encryption & Privacy - Transparent client-side encryption for cloud-stored files.
- Secret Management - Transparent client-side encryption for cloud-stored files.
- Sicherheit und Datenschutz - Client-side encryption for files stored in the cloud.
