Amazon S3 - which encryption to use?

71 views
Skip to first unread message

xilex

unread,
Feb 28, 2021, 8:14:34 PM2/28/21
to Cyberduck
Hi all, I'm trying to understand what encryption options should be used when uploading files to Amazon S3. I am moving them directly to Deep Glacier. So far I see a number of options:

1. under my bucket > Properties, there is an option for Default encryption, which looks like a server-side encryption
2. in Cyberduck, I can create a new Encrypted Vault that uses my specified passphrase
3. in Cyberduck, under Preferences > S3 > Encryption, I have the option to choose the algorithm to encrypt when uploading

Are all three independent of each other? And is there a preferred way? Thank you.

David Kocher

unread,
Mar 12, 2021, 1:53:40 PM3/12/21
to Cyberduck
We support S3 server side encryption which comes in two flavours with keys managed by S3 or in AWS Key Management Service (KMS). Refer to https://trac.cyberduck.io/wiki/help/en/howto/s3#ServerSideEncryptionSSE

Additionally we support client side encryption for any server storage using the Cryptomator vault format. Refer to https://cyberduck.io/cryptomator/

— David
> --
> --
> You received this message because you are subscribed to the Google Groups "Cyberduck" group. To post to this group, send email to cybe...@googlegroups.com
> To unsubscribe from this group, send email to cyberduck+...@googlegroups.com
> For more options, visit this group at http://groups.google.com/group/cyberduck
> --
> Post bug reports and feature requests
> http://trac.cyberduck.ch/newticket
> --
> Support development
> http://cyberduck.ch/donate/
>
> ---
> You received this message because you are subscribed to the Google Groups "Cyberduck" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to cyberduck+...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/cyberduck/7f6b14da-e24c-4a2b-8281-7079721e9354n%40googlegroups.com.

Reply all
Reply to author
Forward
0 new messages