Ask HN: Anyone Using Icedrive.net?

4 points by fmpwizard 5 years ago | 3 comments

I'm looking for an encrypted cloud drive and I found : https://icedrive.net/encrypted-cloud-storage

Can anyone here comment on their statement:

> Icedrive is the only encrypted cloud storage solution to use the bulletproof twofish algorithm. Widely accepted by cryptographers as a more secure solution than AES/Rijndael.

What I know about them and bothered me is that their sign up page restricts passwords to 32 characters max. Most of the time, when I see a site having such limits, they also have very questionable decisions all across their app.

mtmail 5 years ago |

If that's the only concern just email them. I'd say the limit is the web/backend framework default configuration. In mine I had to set 128 manually. In the configuration file there was a warning about the number of stretches to set. A long password with high number of stretches can take 60s to encrypt (decrypt is faster) and used to make a website unresponsive. Rather look what the minimum password length policy is, if they support 2FA, all indications they care to protect the password.

If really paranoid you can use open source, your own keys and a provider like https://www.borgbase.com/

fmpwizard 5 years ago | |

the password length was part of the issue, but one where I need help with is them saying: "Widely accepted by cryptographers as a more secure solution than AES/Rijndael"

dylz 5 years ago | | |

The part I'm more concerned about is that they turn off encryption completely for free accounts, which implies the existence of some kind of remotely-controllable "encryption killswitch"