nextcloud / nextcloud/backup

Add support for Adiantum encryption (for devices lacking AES-NI acceleration)

Open
#425 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
PHP
Stars
272
Forks
37
PR merge metrics
No merged PRs in 30d

Description

This would greatly improve encryption/packing speeds on devices without onboard AES acceleration, such as the Raspberry Pi. I find my Pi 4 performs extraordinarily well in all regards within Nextcloud except for the Backup app as it falls back to aes-256-cbc. The performance of Adiantum (especially ChaCha12) on the Pi 4 is more than enough to keep up with USB 3.0 drive, where I have Raspberry Pi OS installed, meaning encryption speeds would no longer be a bottleneck.

Edit: Adiantum has been a part of the kernel since 5.0, and 5.10 on the Raspberry Pi. Most modern devices likely have this cipher as an option.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files, tests, or entry points are named. Start by locating the existing aes-256-cbc encryption path and its tests, then determine how cipher selection is represented; done means Adiantum is supported for devices without AES acceleration and its behavior is covered by tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
php, raspberry-pi
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.