Filename leaking even when encryption is enabled

General Discussion in English
Post Reply
daiquiri
Posts: 13
Joined: Sun Sep 20, 2020 11:17 am

Filename leaking even when encryption is enabled

Post by daiquiri »

Hello,
I'm testing Syncovery 9.13b windows 64bit.

If you do the following:
  • Create a new profile
  • Enable "Use compressed packages"
  • Set files per package to 25000 and max file to put in package: 1Gb
  • Enable all encrypted settings
  • Have a directory with multiple small files and one file bigger than 1Gb
Do the backup, after hat you have two files in the backup destinantion
  • Rename the obviously bigger than 1Gb file have ".zip" extension
  • Open the file
File names are NOT encrypted
Files can be extracted without a password!

Thus defeating the encryption purpose!

tobias
Posts: 1603
Joined: Tue Mar 31, 2020 7:37 pm

Re: Filename leaking even when encryption is enabled

Post by tobias »

Thanks, I will look into it.

tobias
Posts: 1603
Joined: Tue Mar 31, 2020 7:37 pm

Re: Filename leaking even when encryption is enabled

Post by tobias »

Hello,
I cannot confirm this issue. Can you please send the log files from your test to support@syncovery.com?

Thanks.

daiquiri
Posts: 13
Joined: Sun Sep 20, 2020 11:17 am

Re: Filename leaking even when encryption is enabled

Post by daiquiri »

Sent!

tobias
Posts: 1603
Joined: Tue Mar 31, 2020 7:37 pm

Re: Filename leaking even when encryption is enabled

Post by tobias »

Hello,

thanks for sending the test files and log!

I found the cause - the option "Max file size to put in package" on the Compressed Package Dialog is totally misleading. What it means that larger files than the specified lmit will not be zipped or encrypted at all.

But the filename is encrypted, which makes this even more misleading.

I am changing the behavior in the next update so that this option is ignored when encryption is on. Files will be zipped and encrypted even beyond that size.

The actual option to split zip files is not this one - it's not in the sub-dialog box for zip packages. Instead, it's on the Compression tab sheet in the profile, and it's called:

X Limit Zip File Size To

I hope this will work for you!

Also, the next version will no longer encrypt the filenames of the zip archives themselves, when you put multiple encrypted files in a single zip archive. I found that this was never intended behavior.

tobias
Posts: 1603
Joined: Tue Mar 31, 2020 7:37 pm

Re: Filename leaking even when encryption is enabled

Post by tobias »

Hello,
Syncovery 9.16 has now been released, preventing this problem.

daiquiri
Posts: 13
Joined: Sun Sep 20, 2020 11:17 am

Re: Filename leaking even when encryption is enabled

Post by daiquiri »

tobias wrote:
Fri Oct 02, 2020 9:09 pm
Hello,

thanks for sending the test files and log!

I found the cause - the option "Max file size to put in package" on the Compressed Package Dialog is totally misleading. What it means that larger files than the specified lmit will not be zipped or encrypted at all.

But the filename is encrypted, which makes this even more misleading.

I am changing the behavior in the next update so that this option is ignored when encryption is on. Files will be zipped and encrypted even beyond that size.

The actual option to split zip files is not this one - it's not in the sub-dialog box for zip packages. Instead, it's on the Compression tab sheet in the profile, and it's called:

X Limit Zip File Size To

I hope this will work for you!

Also, the next version will no longer encrypt the filenames of the zip archives themselves, when you put multiple encrypted files in a single zip archive. I found that this was never intended behavior.
Thank you so much. I've tested and now it is a lot easier to understand the differences.

So, question: no way to limit filesize when using sz? spliting in multiple files is only possible with ZIP?
Anyway to avoid having very big files when using SZ? because if the upload fails I have to start over

tobias
Posts: 1603
Joined: Tue Mar 31, 2020 7:37 pm

Re: Filename leaking even when encryption is enabled

Post by tobias »

Hello,
the only way to get shorter Sz files is when you upload via the Internet button. There's an option to split large files there.

daiquiri
Posts: 13
Joined: Sun Sep 20, 2020 11:17 am

Re: Filename leaking even when encryption is enabled

Post by daiquiri »

Thank you for replying. Well I add the suggestion to.

1) add files until files-per-package is hit
2) if max-file-to-put-in-package is hit, split the archive
2a) edge case is if the file being compressed is way bigger, but it is an approximation to the limit and not a hard limit


Since right now this is a SZ limitation (and not ZIP)
Since SZ is superior in everything this could work

Post Reply