Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Not all uploaded files are encrypted #1103

Closed
happybeing opened this issue Dec 19, 2023 · 5 comments
Closed

Not all uploaded files are encrypted #1103

happybeing opened this issue Dec 19, 2023 · 5 comments
Labels
Bug Something isn't working

Comments

@happybeing
Copy link
Contributor

I think files under a certain size are not yet being encrypted so raising this issue to highlight this. I tested this by just doing a grep for a common word in the record_store of my 13 nodes and multiple records were found to contain plaintext.

Obviously this is not satisfactory for MVP/beta, but I also wonder if it could affect distribution of data among nodes, being less random than encrypted chunks.

@joshuef
Copy link
Contributor

joshuef commented Jan 5, 2024

Could affect distribution aye. There's no real way for nodes to reject unencrypted data though 🤔

I wonder if we should probably just pad such small data if we're putting it up and reject anything less than a chunk? Then at least users wouldn't accidentally store unencrypted data eg.

@happybeing
Copy link
Contributor Author

Padding might be a safe 😉 default, so long as it doesn't overly restrict use because an application might handle that differently.

So may make sense as a feature in safe client that is optional but on by default.

@joshuef
Copy link
Contributor

joshuef commented Jan 9, 2024

Update as per the forum: https://safenetforum.org/t/newyearnewnet-04-01-2024-testnet/39034/272?u=joshuef

Miminal plan is thus:

  • Nodes encrypt data themselves
  • sn_client errors if data cannot be encrypted (ie no surprise public data!)
  • sn_cli wraps sn_client and self encryption layers to ensure all data is encrypted in some fashion via encrypted registers (ie, normal users get all data encrypted via CLI).

@joshuef
Copy link
Contributor

joshuef commented Jan 9, 2024

ll close this as we've got a more specific set of follow on issues here. Thanks @happybeing !

@joshuef joshuef closed this as completed Jan 9, 2024
@JasonPaulGithub
Copy link
Contributor

This is linked to #1487
Which is what I'm working on. Hope that helps 👍

@JasonPaulGithub JasonPaulGithub added the Bug Something isn't working label Apr 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants