Hosted drives sit on a server that holds the Sia connection key, so private files must be unreadable there. Names are encrypted per path segment with AES-SIV (deterministic, so folders and prefix listing still work on the server) and bodies with chunked AES-256-GCM bound to drive and path, with sizes computable both ways so uploads stream and range reads stay cheap. |
||
|---|---|---|
| .. | ||
| autoflush.test.js | ||
| crypt.test.js | ||
| sigv4.test.js | ||