Cherry-Node icon indicating copy to clipboard operation
Cherry-Node copied to clipboard

IPFS Requests encryptions

Open charmitro opened this issue 3 years ago • 2 comments

Brief

Ideally we would want to encrypt all IPFSAsset stored data(all IPFS struct attributes probably).

@zycon91 Let's discuss how this is going to happen.

charmitro avatar Apr 15 '22 13:04 charmitro

@zycon91 propose an encrypt/decrypt flow, regardless the ecryption method that we're going to choose.

charmitro avatar Apr 21 '22 12:04 charmitro

@zycon91 propose an encrypt/decrypt flow, regardless the ecryption method that we're going to choose.

Encryption/Decryption flow for data at rest (stored IPFS Assets)

1. Encrypt all the IPFS Asset's information (I don't know if we want to encrypt all the attributes. The most important ones should be cid and gateway_url) before storing them, with the owner's key. 2. Store the key (should probably encrypt that key as well). 3. Make a request_access function so that other users can request access to the encrypted IPFS. The function can check if the user requesting access has an ownership layer (reader/editor) and if he has, the function can return to him the decrypted file.

zycon91 avatar Apr 21 '22 15:04 zycon91