Encryption & File Security on Desktop

[Tony]

Hi @jesse.stone1944,
This post contains a lot of information regarding our Encryption, along with a link to a python utility that can be used to decrypt odrive-encrypted files without the odrive desktop app:

Encryption questions: Key storage, decryption process, and others

Hi @amirstep, Please see my answers below: Data encryption/decryption: Encrypting: Generate a random 64-bit salt (S) Generate a 128-bit key (K) using PBKDF2 with S and the user’s passphrase (P), 5000 iterations, and HMAC-SHA256 for PRF Generate a random 128-bit initialization vector (IV) Compute a hash (H) of the file data using SHA256 Plaintext (PT) is: (file data + H + PKCS #7 padding to the next multiple of 16 bytes) Generate the ciphertext (CT) using AES-CBC to encrypt PT using the K …

@jesse.stone1944

Is there anyway to stop people from accessing my files on desktop odrive if they have access to my laptop?

There are a few ways:

1. If you’ve never entered your encryption passphrase(s) on that system, they will not be able to open them.
2. If you remove the stored passphrases (mac keychain or windows registry), and restart odrive, it will ask for the passphrase again.
3. Deauthorizing odrive will require reauthorizing (logging back into odrive) before you can access your remote data again.
4. Expiring all session from this page: odrive | Sign in will expire all existing sessions for your account and log out of the clients. You would need to log back in to gain access to your remote data again.
5. Removing an Encryptor folder from here: odrive | Sign in will remove it from the client view.