Zero-Knowledge Encryption

ByteHide Storage provides two levels of encryption: standard AES encryption and quantum-resistant encryption. Both ensure that your data remains private and secure, as files are encrypted before leaving your application.

Standard Encryption (AES)

Use AES-256 encryption for standard security needs:

// Enable encryption for a specific operation
storage
    .In("secure/documents")
    .Encrypt()
    .FromFile("confidential.pdf", "local/report.pdf");

// Chain with other operations
storage
    .In("secure/config")
    .Encrypt()
    .Compress()
    .Set("settings.json", jsonContent);

Quantum-Resistant Encryption

For future-proof security against quantum computers, use quantum-resistant encryption:

// Initialize with specific quantum algorithm
var storage = new StorageManager(
    "<token>",
    "<phrase>",
    quantumAlgorithm: QuantumAlgorithmType.Kyber1024
);

// Enable quantum encryption for an operation
storage
    .In("quantum/data")
    .EncryptWithQuantum()
    .FromFile("sensitive.dat", "local/data.dat");

Available Quantum Algorithms

Choose from multiple quantum-resistant algorithms:

// Kyber1024 (default) - Highest security level
var storage = new StorageManager(quantumAlgorithm: QuantumAlgorithmType.Kyber1024);

// Kyber768 - Balance of security and performance
var storage = new StorageManager(quantumAlgorithm: QuantumAlgorithmType.Kyber768);

// Kyber512 - Optimized for performance
var storage = new StorageManager(quantumAlgorithm: QuantumAlgorithmType.Kyber512);

Automatic Decryption

The SDK automatically handles decryption for both standard and quantum-encrypted files:

// The SDK detects encryption type and decrypts automatically
string content = storage.GetText("secure/documents/confidential.pdf");
byte[] data = storage.GetBytes("quantum/data/sensitive.dat");

// No need to specify decryption method
storage.SaveToDisk("secure/config/settings.json", "local/settings.json");

Best Practices

1. Key Management:

   • Store encryption phrases securely using ByteHide Secrets
   • Never hardcode encryption phrases in your code
   • Use different phrases for different environments (development, staging, production)

2. Key Rotation:

   • Plan for key rotation scenarios
   • Keep track of which keys were used for which files
   • Re-encrypt files when rotating keys

// Example using ByteHide Secrets for key management
var secrets = new SecretsManager("<secrets_token>");
string encryptionPhrase = await secrets.Get("storage_encryption_phrase");

var storage = new StorageManager("<storage_token>", encryptionPhrase);

Post-Quantum Algorithms

Learn more about our quantum-resistant algorithms:

Quantum Protection Overview

Understanding post-quantum cryptography and its implementation in ByteHide Storage.

Kyber Family

• Kyber512 - High performance, NIST Level 1
• Kyber768 - Balanced, NIST Level 3
• Kyber1024 - Maximum security, NIST Level 5

MLKEM Family

• MLKEM512 - Optimized performance
• MLKEM768 - Enterprise security
• MLKEM1024 - Highest protection

Additional Algorithms

• Sntrup761 - NTRU Prime-based alternative
• FrodoKem1344Shake - Conservative security choice