Authenticated symmetric encryption
XChaCha20-Poly1305 (AEAD) protects file and message contents. Each chunk uses a unique nonce; any modification breaks decryption.
The cryptographic primitives behind DRIVUNO, in plain language.
XChaCha20-Poly1305 (AEAD) protects file and message contents. Each chunk uses a unique nonce; any modification breaks decryption.
Argon2id with modern parameters turns your password into a master key on your device. Memory-hard KDFs raise the cost of offline attacks dramatically.
X25519 for key agreement, Ed25519 for signatures. Sharing and messaging use sealed boxes built on X25519.
We rely on libsodium, a widely reviewed implementation of these primitives. We avoid proprietary cryptography.
File-encryption keys are wrapped under the master key. Sharing wraps them under recipient public keys. Revoking a shared key invalidates that wrap.
We deliberately avoid that phrase. The accurate statement is: DRIVUNO uses modern, widely reviewed cryptographic primitives via libsodium.
Start free with 2 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.