Support Nov 02, 2009
PLEASE NOTE THAT SOME OF THE OPTIONS MAY NOT BE VISIBLE UNLESS THE "SHOW ADVANCED OPTIONS" FEATURE IS ENABLED IN THE LOWER LEFT SECTION OF THE CONFIGURATION.
The
Jungle Disk Desktop Edition encrypts all network traffic to the cloud
storage providers automatically. As an added level of security, you
can choose to store your files in an encrypted format on the
servers as well. Your files are encrypted before they are uploaded and
can only be decrypted using your private online disk password.
WARNING: Do
not lose or forget your password. If you do, you will not be able to
access your files and Jungle Disk will not have the ability to recover
your files.
Encryption for Jungle Disk 2.0 online disks has been
simplified to use an online disk password. To enable encryption for the
selected online disk, choose a password that is difficult for others to
guess. Again, do not lose or forget this password as your files
cannot be retrieved without the online disk password.
Once you have enabled encryption, you can opt to change the online disk password or remove encryption all together. It is important to note that if you disable encryption, any new files that you upload will not be stored in an encrypted format. Any existing encrypted files will still remain encrypted, however, the encryption key will be stored along with the files so they can be accessed without your bucket password in the future.
For Jungle Disk 1.0 online disks, encryption
is managed in a similar manner, however, if you change encryption keys,
you will need to keep a running list of previous encryption keys to
ensure files that we originally encrypted with that key can be accessed
in the future.
If you upgrade a Jungle Disk 1.0 online disk to a
Jungle Disk 2.0 online disk, you will need to maintain this list of
previous encryption keys as well. This is done via the Manage decryption keys for upgraded Jungle Disk 1.0 online disks.
Here are a few details on how Jungle Disk encrypts your files:
Jungle
Disk encrypts files that are stored prior to uploading them using
256-bit AES. AES is an industry (and government) standard and is one of
the most well studied and most secure encryption algorithms available.
Jungle Disk uses a unique key for each file, and constructs the key
using a HMAC that helps protect against certain attacks. Code that
demonstrates how data is encrypted/decrypted is available for download
on the software download page under the GPL license.
The Jungle
Disk Desktop Edition adds a special metadata header to each file when
it is uploaded. The header identifies the type of encryption used and
contains a salt value and a one-way hash of the salted key. This allows
Jungle Disk to determine the correct key to use to decrypt the file.
Note that without the decryption keys the header is of no use, and you
cannot even tell which files are encrypted with which keys unless you
possess the keys.