Skip to content

Conversation

@jzunigax2
Copy link
Contributor

Fixes file upload to use proper AES-256-CTR encryption and adds download endpoint with integrity verification.

  • Fixed POST /drive/files - Now properly encrypts files before upload
    • Implements BIP39 mnemonic-based encryption matching web app
    • Uses SHA-512 key derivation (not PBKDF2) for file keys
    • Decrypts user mnemonic with password before use
    • Files now downloadable/decryptable through web app
  • Added GET /drive/download - Download and decryption health check
    • Downloads most recent health-check-* file
    • Decrypts using stored encryption index
    • Verifies plaintext content integrity
    • Returns 503 if decryption fails or content doesn't match

@jzunigax2 jzunigax2 self-assigned this Nov 12, 2025
@jzunigax2 jzunigax2 marked this pull request as draft November 28, 2025 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants