Protecting Your Digital Vault: End-to-End Cryptography Demystified
Most cloud storage platforms encrypt your data 'at rest,' meaning the files are encrypted only after they reach their servers. The critical vulnerability of that approach is that the platform holds the keys. If their server is compromised, or a rogue employee gains access, your private data can be decrypted.
MyFinalVideo uses browser-side encryption and a server-assisted delivery process. Here is how the two parts work together:
The Math of AES-256-GCM
When you record or upload a video on our platform, your browser generates a random 256-bit symmetric Data Encryption Key (DEK). The video file is scrambled using AES-GCM right in your browser's memory sandbox. By the time the file is transmitted over the internet, it is already indecipherable ciphertext.
Your password is used with PBKDF2 to wrap the owner copy of the video key. A separate dispatch-wrapped key supports later recipient delivery. The server can unwrap that key using the KMS-protected dispatch secret and wrap it for the recipient. Password hashing therefore does not make privileged key access mathematically impossible.
Client-Side Encrypted Storage
This design means that routine storage keeps video content as encrypted blobs. Without the required key material, the ciphertext cannot be reversed into a watchable video. Recipient delivery still depends on the documented server-assisted dispatch flow, so the precise claim is client-side encrypted storage rather than pure zero-knowledge.
Secure Your Digital Legacy Today
Write or record your thoughts in a client-side encrypted vault. Only delivered when your configured delivery process is complete.
Create Free Account →