Traditional cloud architectures rely on 'Encryption at Rest' managed by the cloud host. In reality, this only protects against someone physically stealing a hard drive from a datacenter. The cloud host's operating system still holds the master key and can read every byte.
In Foxcolab, client-side encryption starts with the user's passphrase and biometric hardware enclave. Using Argon2id with 64MB memory cost, we derive the Master Identity Key (MIK) entirely on the client.
For team collaboration, ephemeral symmetric data keys are negotiated peer-to-peer using X3DH and double ratchet protocols. Our relays only ever see ciphertext. Even in the event of an adversary acquiring root access to our server fleet, they acquire nothing more than randomized entropy.
Engineers and security specialists building Foxcolab's zero-knowledge collaboration suite.
