客戶端加密

客戶端加密（英语：Client-side encryption）是一门密码学加密技术，指的是先将数据于发送端进行加密，然后才发送到像网盘般的服务端^[1]。此举使得只有发送者拥有密钥，继令服务提供者难以将数据解密。应用了客戶端加密的应用程序隐私性相对较强，即使是服务提供者也不能直接得知被加密的内容^[1]。该些应用程序有时会以“零知识”这一误导性用语作宣传^[2]。

解说

客戶端加密旨在使服务提供者（或强迫其交出数据的第三方）难以窥探用户上传的数据，保证存储在云端上的文件只能于相应客戶端上查看。这样可以防止数据丢失，以及文件在未经授权的情况下泄露给第三方，令用户更为安心^[1]。

目前的学术研究及IT专业人士皆建议，开发者应在应用程序上加入客戶端加密功能，以保障信息的机密性及完整性^[3]^[4]^[5]。

提供了客戶端加密的云存储服务有Tresorit（英语：Tresorit）^[6]、MEGA^[7]、SpiderOak（英语：SpiderOak）^[8]。截至2016年2月，ICloud^[1]^[9]、 Google Drive^[10]、Dropbox^[11]皆不支持客戶端加密。

参见

同态加密

参考资料

^ ^1.0 ^1.1 ^1.2 ^1.3 Tunio Gaffer. Why Client-Side Encryption Is the Next Best Idea in Cloud-Based Data Security. Information Security Today. Auerbach Publications. 2015 [2016-02-21]. （原始内容存档于2016-01-16）.
^ Spider Oak - Please stop describing your service as "Zero Knowledge" unless and ... | Hacker News. news.ycombinator.com. [2018-07-16]. （原始内容存档于2018-07-16）.
^ Deka, Ganesh Chandra. 3 Security Architecture for Cloud Computing. Handbook of Research on Securing Cloud-Based Databases with Biometric Applications. IGI Global. 2014-10-31 [2016-02-21]. ISBN 978-1-4666-6560-6. （原始内容存档于2020-07-18）.
^ Tobias Ackermann. IT Security Risk Management: Perceived IT Security Risks in the Context of Cloud Computing. Springer Science & Business Media. 2012-12-22: 136– [2016-02-21]. ISBN 978-3-658-01115-4. （原始内容存档于2020-07-20）.
^ Communications of the Association for Information Systems 13:Article 24. Cloud Computing Sicherheit: Schutzziele, Taxonomie, Marktübersicht. Fraunhofer-Institut für Sichere Informationstechnologie SIT. 2009 [2016-02-21]. ISBN 978-3-9813317-0-7. （原始内容存档于2020-08-06）.
^ Get 50GB of Free, Encrypted Online Storage from Tresorit. lifehacker. 2013-11-04 [2020-07-11]. （原始内容存档于2018-05-10）.
^ Graeber, Charles. Megaupload Is Dead. Long Live Mega! | Threat Level. Wired.com. 2013-03-28 [2013-06-14]. （原始内容存档于2013-06-25）.
^ SpiderOak: Dropbox for the security obsessive. [2020-07-11]. （原始内容存档于2016-10-01）. The chief difference between SpiderOak and its competitors for the security and privacy-conscious is in how the services treat user data.
^ Tunio Zaffer. Client Side Encryption: The Latest Trend In Cloud Storage. Dataconomy. 2015-04-08 [2016-02-21]. （原始内容存档于2016-03-02）.
^ Tom McNamara. How to make Google Drive more secure: Get file encryption and strong password protection to secure your stuff.. CNET’s The Download Blog. 2015-07-08 [2016-02-21]. （原始内容存档于2016-03-09）.
^ Can I specify my own private key for my Dropbox?. [2016-02-21]. （原始内容存档于2016-03-03）.

[infosectoday-1] 1.0 ^1.1 ^1.2 ^1.3 Tunio Gaffer. Why Client-Side Encryption Is the Next Best Idea in Cloud-Based Data Security. Information Security Today. Auerbach Publications. 2015 [2016-02-21]. （原始内容存档于2016-01-16）.

[2] Spider Oak - Please stop describing your service as "Zero Knowledge" unless and ... | Hacker News. news.ycombinator.com. [2018-07-16]. （原始内容存档于2018-07-16）.

[Chandra2014-3] Deka, Ganesh Chandra. 3 Security Architecture for Cloud Computing. Handbook of Research on Securing Cloud-Based Databases with Biometric Applications. IGI Global. 2014-10-31 [2016-02-21]. ISBN 978-1-4666-6560-6. （原始内容存档于2020-07-18）.

[Ackermann2012-4] Tobias Ackermann. IT Security Risk Management: Perceived IT Security Risks in the Context of Cloud Computing. Springer Science & Business Media. 2012-12-22: 136– [2016-02-21]. ISBN 978-3-658-01115-4. （原始内容存档于2020-07-20）.

[5] Communications of the Association for Information Systems 13:Article 24. Cloud Computing Sicherheit: Schutzziele, Taxonomie, Marktübersicht. Fraunhofer-Institut für Sichere Informationstechnologie SIT. 2009 [2016-02-21]. ISBN 978-3-9813317-0-7. （原始内容存档于2020-08-06）.

[6] Get 50GB of Free, Encrypted Online Storage from Tresorit. lifehacker. 2013-11-04 [2020-07-11]. （原始内容存档于2018-05-10）.

[7] Graeber, Charles. Megaupload Is Dead. Long Live Mega! | Threat Level. Wired.com. 2013-03-28 [2013-06-14]. （原始内容存档于2013-06-25）.

[8] SpiderOak: Dropbox for the security obsessive. [2020-07-11]. （原始内容存档于2016-10-01）. The chief difference between SpiderOak and its competitors for the security and privacy-conscious is in how the services treat user data.

[dataconomy-9] Tunio Zaffer. Client Side Encryption: The Latest Trend In Cloud Storage. Dataconomy. 2015-04-08 [2016-02-21]. （原始内容存档于2016-03-02）.

[googledriveinsecure-10] Tom McNamara. How to make Google Drive more secure: Get file encryption and strong password protection to secure your stuff.. CNET’s The Download Blog. 2015-07-08 [2016-02-21]. （原始内容存档于2016-03-09）.

[dropboxnoprivatekey-11] Can I specify my own private key for my Dropbox?. [2016-02-21]. （原始内容存档于2016-03-03）.

[1]

[2]

[3]

[4]

[5]

[6]

[7]

[8]

[9]

[10]

[11]