{"id":29190703,"url":"https://github.com/owncloud/encryption","last_synced_at":"2025-07-02T00:10:57.968Z","repository":{"id":38272615,"uuid":"97686891","full_name":"owncloud/encryption","owner":"owncloud","description":" :lock_with_ink_pen: server side encryption of files","archived":false,"fork":false,"pushed_at":"2025-05-09T12:54:50.000Z","size":2400,"stargazers_count":18,"open_issues_count":45,"forks_count":12,"subscribers_count":46,"default_branch":"master","last_synced_at":"2025-06-27T21:13:47.175Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/owncloud.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2017-07-19T07:33:46.000Z","updated_at":"2025-04-24T16:02:25.000Z","dependencies_parsed_at":"2024-02-19T05:32:07.447Z","dependency_job_id":"8ac6f1ad-3e27-4a73-aeeb-3da620dceb80","html_url":"https://github.com/owncloud/encryption","commit_stats":null,"previous_names":[],"tags_count":15,"template":false,"template_full_name":null,"purl":"pkg:github/owncloud/encryption","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncloud%2Fencryption","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncloud%2Fencryption/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncloud%2Fencryption/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncloud%2Fencryption/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/owncloud","download_url":"https://codeload.github.com/owncloud/encryption/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/owncloud%2Fencryption/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":263052430,"owners_count":23406106,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-07-02T00:10:57.025Z","updated_at":"2025-07-02T00:10:57.912Z","avatar_url":"https://github.com/owncloud.png","language":"PHP","funding_links":[],"categories":[],"sub_categories":[],"readme":"# encryption\n :lock_with_ink_pen: server side encryption of files\n \n [![Build Status](https://drone.owncloud.com/api/badges/owncloud/encryption/status.svg)](https://drone.owncloud.com/owncloud/encryption)\n[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=owncloud_encryption\u0026metric=alert_status)](https://sonarcloud.io/dashboard?id=owncloud_encryption)\n[![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=owncloud_encryption\u0026metric=security_rating)](https://sonarcloud.io/dashboard?id=owncloud_encryption)\n[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=owncloud_encryption\u0026metric=coverage)](https://sonarcloud.io/dashboard?id=owncloud_encryption)\n\nIn order to use this encryption module you need to enable server-side\nencryption in the admin settings. Once enabled this module will encrypt\nall your files transparently. The encryption is based on AES 256 keys.\nThe module won't touch existing files, only new files will be encrypted\nafter server-side encryption was enabled. It is also not possible to\ndisable the encryption again and switch back to a unencrypted system.\nPlease read the documentation to know all implications before you decide\nto enable server-side encryption.\n\n## The following occ commands are not documented in the official documentation but added here for completness\n\nThe values bellow mostly represent internal configuration state and should not be set by the user directly. They are controlled by respective encryption-commands. Change only if you know what you are doing or are debugging.\n\n`config:app:set encryption masterKeyId --value ??`\n\n`config:app:set encryption recoveryKeyId --value ??`\n\nThe ID of the respective key. Background: Instead of giving a path to a keyfile (which might be error-prone) an explicit key-id which is part of the key is given. This is also done to accomodate for Keystorages which might not be file-based.\n\n`config:app:set encryption useMasterKey --value 1/0`\n\nIs masterkey encryption enabled?\n\n`config:app:set encryption crypto.engine --value 'internal | hsm'`\n\nNormal ownCloud encryption vs storing decryption-keys in a HSM\n\n`config:app:set encryption recoveryAdminEnabled --value 1/0`\n\n\n\u003e Note : You need openSSL version 1.1.x installed for encryption app to work. With the release change of openSSL v1.x to openSSL version 3.x in December 2021, some ciphers which were valid in version 1.x, have been retired with immediate effect. This impacts the ownCloud encryption app. Your encryption environment will break due to openSSL v3 retired (legacy) ciphers. As a result, encrypted files cant be accessed. As a temporary solution, you have to manually reenable in the openSSL v3 config the legacy ciphers. To do so, see the example in the OpenSSL 3.0 Wiki at section 6.2 Providers.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fowncloud%2Fencryption","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fowncloud%2Fencryption","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fowncloud%2Fencryption/lists"}