Send in your ideas. Deadline June 1, 2026
Grant
Theme fund: FileSender
Period: 2019-08 — 2019-08

FileSender

FileSender Crypto Improvements

FileSender is a secure and private way to share very large files with end-to-end encryption. It can be self-hosted or offered as service. After a security assessment by OpenFortress, it became clear that FileSender should move from AES-CBC to AEC-GCM mode cryptography. The random password generator should also produce a random fixed length key tuned to provide the entropy that the AES algorithm can take advantage of. The CI test suite is extended to test that the data encrypted using an older key mode can be decoded by the current FileSender release to ensure updates and migrations do not cause issues.