Forums/User Guide : Jungle Disk Desktop Edition

Configuration : Encryption

Support November 02, 2009

PLEASE NOTE THAT SOME OF THE OPTIONS MAY NOT BE VISIBLE UNLESS THE "SHOW ADVANCED OPTIONS" FEATURE IS ENABLED IN THE LOWER LEFT SECTION OF THE CONFIGURATION.

 

The Jungle Disk Desktop Edition encrypts all network traffic to the cloud storage providers automatically.  As an added level of security, you can choose to store your files in an encrypted format on the servers as well.  Your files are encrypted before they are uploaded and can only be decrypted using your private online disk password.

WARNING: Do not lose or forget your password.  If you do, you will not be able to access your files and Jungle Disk will not have the ability to recover your files.

Encryption for Jungle Disk 2.0 online disks has been simplified to use an online disk password.  To enable encryption for the selected online disk, choose a password that is difficult for others to guess. Again, do not lose or forget this password as your files cannot be retrieved without the online disk password.

Once you have enabled encryption, you can opt to change the online disk password or remove encryption all together.  It is important to note that if you disable encryption, any new files that you upload will not be stored in an encrypted format.  Any existing encrypted files will still remain encrypted, however, the encryption key will be stored along with the files so they can be accessed without your bucket password in the future.

For Jungle Disk 1.0 online disks, encryption is managed in a similar manner, however, if you change encryption keys, you will need to keep a running list of previous encryption keys to ensure files that we originally encrypted with that key can be accessed in the future.

If you upgrade a Jungle Disk 1.0 online disk to a Jungle Disk 2.0 online disk, you will need to maintain this list of previous encryption keys as well.  This is done via the Manage decryption keys for upgraded Jungle Disk 1.0 online disks.

Here are a few details on how Jungle Disk encrypts your files:
Jungle Disk encrypts files that are stored prior to uploading them using 256-bit AES. AES is an industry (and government) standard and is one of the most well studied and most secure encryption algorithms available. Jungle Disk uses a unique key for each file, and constructs the key using a HMAC that helps protect against certain attacks. Code that demonstrates how data is encrypted/decrypted is available for download on the software download page under the GPL license.

The Jungle Disk Desktop Edition adds a special metadata header to each file when it is uploaded. The header identifies the type of encryption used and contains a salt value and a one-way hash of the salted key. This allows Jungle Disk to determine the correct key to use to decrypt the file. Note that without the decryption keys the header is of no use, and you cannot even tell which files are encrypted with which keys unless you possess the keys.

 
Topic is closed for comments