How to implement a secure Microsoft Recall alternative? (lemmy.one)

submitted 5 months ago by I_like_cats@lemmy.one to c/cryptography@lemmy.ml

12 comments fedilink hide all child comments

So, I've had a bit of a stupid idea for my next programming project, which would be implementing a Microsoft Recall alternative for Linux where the data is encrypted. I've now written a bit of code and have come to the point where I'd need to encrypt the files. My plan was to use asymmetric encryption where the secret key is again encrypted using something like AES and the user needs to decrypt the private key to view the screenshots taken / data extracted from the screenshots.

I have now learned that asymmetric encryption is very slow and it's generally not designed to encrypt large chunks of data, so I'm not sure how to continue. Do you think asymmetric encryption is feasible for this? Any idea how else to do the encryption? Ideally I would like for the server that takes the screenshots to not have a key that can decrypt the files since that wouldn't be as secure.

you are viewing a single comment's thread
view the rest of the comments

[-] OneCardboardBox@lemmy.sdf.org 5 points 5 months ago* (last edited 5 months ago)

My plan was to use asymmetric encryption where the secret key is again encrypted using something like AES

I think your terminology is off. AES is an example of symmetric encryption: Decryption requires the same key as encryption.

An example of asymmetric encryption would be public-key cryptography: You encrypt a message with the public key, but only a private key can decrypt the result.

AES should be fine for encrypting large blocks of data.

I believe that for systems like TLS, asymmetric encryption is only used briefly to negotiate a symmetric key between client and server.

[-] trolololol@lemmy.world 1 points 5 months ago

Have in mind most image processing is done with lowered resolutions for getting more speed. So consider having a downscale parameterized as : image reduction ratio, and method (average, anti aliasing, or just use one of the pixels and discard the others)

this post was submitted on 07 Jun 2024

3 points (100.0% liked)

Cryptography

452 readers

1 users here now

cryptography (noun). The discipline concerned with communication security (eg, confidentiality of messages, integrity of messages, sender authentication, non-repudiation of messages, and many other related issues), regardless of the used medium such as pencil and paper or computers.

This community is for links about and discussion of cryptography specifically. For privacy technology more generally, use !privacy.

This community is explicitly not about cryptocurrency; see !crypto for that.

founded 3 years ago

MODERATORS

cypherpunks@lemmy.ml

Bitrooms@lemmy.ml