Contributor
Tameesh Biswas

A Module for client-side File encryption


Mentors
Colan Schwartz, Adam Bergstein
Organization
Drupal

Objective : This project will involve building a complete module for Drupal 8 site to make it a zero-knowledge system using front-end JS encryption so that the users can rely on the site when uploading sensitive files, including images on confidential posts, not having to worry about data being stolen in case the server gets compromised.
Project Introduction and why this project is important : The implementation of a zero knowledge system is very essential for the user as they would want to rely on the CMS that their data is not being stolen and they are not being spied upon. Using client side encryption, sensitive data is already being encrypted before being stored on the server.
In a confidential post/article sharing sensitive information, the embedded illustrative images and attached files might contain more detailed information than the plain-text article that only provide an overview to the actual in-depth data in the document. Hence, having only the fields encrypted is of no use if the images and other files related to that secret article are leaked by the attackers, possibly posing a higher threat than leak of regular article field text.