Rclone encryption support

I guess it is all in the title … I was sure this already posted and that I did upvote it but I could not find it back here. With big data dady google, storing anything unencrypted is a request for trouble even more when we talk about our vacations family movies so an option to decrpyt on the fly from infuse would be just perfect … Thanks for considering

13 Likes

Background & Request

There are likely a lot of users of Google Drive (and other storage services) who use rclone crypt to encrypt media files and media file names in their preferred storage service.

https://rclone.org/crypt/

This request is to add support for rclone crypt encrypted media libraries for Cloud Services. I will try to provide some requirements and details here as well.

Rclone Crypt

Rclone is built in go. At the core, it uses its own encryption scheme to encrypt and decrypt file names and paths, and secretbox to encrypt and decrypt byte streams.

https://pkg.go.dev/golang.org/x/crypto/nacl/secretbox

The rclone code for encryption and decryption is defined here

In order to support rclone encrypted libraries, you would need to essentially re-write the io stream and filename encryption mechanisms in swift or objc.

Crypt iOS Support

Fortunately, someone has already done a lot of work to re-write the rclone crypt functionality in swift. That code is available here

and the app is ‎CryptCloudViewer on the App Store

The app allows adding crypt support on top of multiple different cloud providers storage solutions. It also is able to stream video from Google Drive (and presumably other cloud storage providers) with its current implementation.

Some Requirements

  1. Add rclone crypt support on top of cloud providers so they can be used with or without rclone crypt
  2. Allow for import of rclone.conf files (ccViewer source code has examples of rclone.conf parsing)
  3. Allow for encrypted filenames or unencrypted filenames

I realize that this will likely be a ton of work and is unlikely to get prioritized quickly, but I wanted to get the suggestion written and available for discussion.

Love Infuse, and I’m looking forward to hearing any thoughts from folks. Thanks!

4 Likes

It would be great to have this option!

Is it possible to add such features? @james thank you.

I support this proposal, I will start using Dropbox and in this one the content will be encrypted, so if there is support from Infuse, it will make my transition from Google to dropbox much easier.

Don’t forget that you need to click the like button on the first post in this thread to show your support for this suggestion! :wink:

1 Like

any chance Infuse adds this feature?

I don’t know if its the same think but I uploaded chunked files with RClone hoping to play them in infuse buy no luck. This one is 20GB so I I’m testing and used RClone to split it and try to skip the Box 15GB file upload file limit.

Far as I know, Infuse doesn’t recognize and magically recombine multi-part files (and per the linked suggestion, over the past seven years there has been little support to add this feature). Doing that with encrypted part files seems even more unlikely, considering the added complexity.

But I’ve been wrong before (or so I’ve been told), and if this new application of what was an essentially extinct practice becomes a lot more popular in the future, anything might happen. :man_shrugging:t2:

1 Like

I hope so. I tried learned how split files to avoid the sole size limit but now I have this problem with infuse lol

+1

This would be amazing!

1 Like

I need this. Thinking about encrypting everything in the cloud. The only solution now is to run an intermediary server that has the decryption key with Plex or Jellyfin on it.

The thing is… if that server is also in the cloud, it becomes an attack surface.

Sure, it can shield your actual storage server or service. If you are worried about TOS violations, not general privacy.

1 Like