0_kit End to End encryption in your app 2016. 11. 21. Mihály Lengyel Developer

A bit of background Tresorit is a secure cloud file storage solution Zero Knowledge We don’t know your password – not even a hash We don’t know your keys – we can’t be forced to give it up We don’t know your data – even a filename leak is a breach Without all the marketing stuff: Both key management and encryption is done on the client

The problem

Channel + “at rest” encryption Storage Server Mallory ? ?

Channel + “at rest” encryption Storage Server Mallory

Client-side Encryption ? Mallory Alice ? Storage Server ? Mallory Bob

Solutions Cloud On-premise srv Client device DRM Key mgmt Encrypt at More keys Complexity Encrypt at Key mgmt Cloud On-premise srv Client device “At-rest” + “In-transit” At-rest + on-prem HSM Session-based encryption CASB encryption gateway DRM Full-disc encryption On-premise DRM Client-side encryption More platforms

Our solution – Zero Kit A building block, embedded into your application Working insides iframes seamlessly blended into your app

Architectural view 0_kit Service Your back-end REST APIs Your database User data, encrypted Approval of client-side operations without exposing user content Enforce business logic on server (e.g. who can share with whom) User profiles Client-side encrypted keys Your browser/mobile app 0_kit client library Zero Knowledge User authentication Key management Encrypt, Decrypt, Share

0_kit End to End encryption in your app To try it contact: dave@tresorit.com Reach me personally: mihaly.lengyel@tresorit.com