Paper 2020/1439 Original: eprint.iacr.org/2020/1439 ↗
Cryptographic Vulnerabilities and Other Shortcomings of the Nextcloud Server Side Encryption as implemented by the Default Encryption Module
Abstract
Nextcloud provides a server side encryption feature that is implemented by the Default Encryption Module. This paper presents cryptographic vulnerabilities that existed within the Default Encryption Module as well as other shortcomings that still need to be addressed. The vulnerabilities allowed an attacker to break the provided confidentiality and integrity protection guarantees. There is a high risk that ownCloud also contains some of the issues presented in this paper as it still has cryptographic code in common with Nextcloud.
Metadata
- Available format(s)
PDF- Category
- Applications
- Publication info
- Preprint.
- History
- 2023-08-06: last updated
- 2020-11-15: published
- Short URL
- https://ia.cr/2020/1439
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2020/1439,
author = {Kevin "Kenny" Niehage},
title = {Cryptographic Vulnerabilities and Other Shortcomings of the Nextcloud Server Side Encryption as implemented by the Default Encryption Module},
howpublished = {Cryptology {ePrint} Archive, Paper 2020/1439},
year = {2020},
url = {https://eprint.iacr.org/2020/1439}
}