Merge pull request #55582 from nextcloud/jtr/chore-app-encryption-desc
Some checks are pending
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
Integration sqlite / changes (push) Waiting to run
Integration sqlite / integration-sqlite (master, 8.4, main, --tags ~@large files_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, capabilities_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, collaboration_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, comments_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, dav_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, federation_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, file_conversions) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, filesdrop_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, ldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, openldap_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, openldap_numerical_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, remoteapi_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, routing_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, setup_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, sharees_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, sharing_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, theming_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite (master, 8.4, main, videoverification_features) (push) Blocked by required conditions
Integration sqlite / integration-sqlite-summary (push) Blocked by required conditions

chore: improve SSE default crypto module app description
This commit is contained in:
Josh 2025-10-09 11:38:09 -04:00 committed by GitHub
commit 9e9bf4988a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -7,12 +7,28 @@
<info xmlns:xsi= "http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="https://apps.nextcloud.com/schema/apps/info.xsd">
<id>encryption</id>
<name>Default encryption module</name>
<summary>Default encryption module for server-side encryption</summary>
<name>Default Encryption Module</name>
<summary>Default encryption module for Nextcloud Server-side Encryption (SSE)</summary>
<description>
In order to use this encryption module you need to enable server-side encryption in the admin settings. Once enabled this module will encrypt all your files transparently. The encryption is based on AES 256 keys.
The module will not touch existing files, only new files will be encrypted after server-side encryption was enabled. It is also not possible to disable the encryption again and switch back to an unencrypted system.
Please read the documentation to know all implications before you decide to enable server-side encryption.
<![CDATA[
This app provides the (default) cryptography implementation for Nextcloud's Server-side Encryption (SSE) feature.
**Encryption Details**
* **Cipher Mode:** AES-256-CTR (default)
* **Authentication:** HMAC-SHA256
**Important Warnings**
* **DANGER:** Do not disable this application until all files have been decrypted (`occ encryption:decrypt-all`).
* **WARNING**: Reverting to non-encrypted file storage after activation requires command-line access. The action is permanent via the Web UI."
**Notes for Existing Files**
* By default, enabling SSE does not encrypt existing files; only new files will be encrypted.
* To encrypt all existing files, use the command `occ encryption:encrypt-all`.
**Before You Begin**
* **Read the Documentation:** Before you enable SSE, encrypt existing files, or disable SSE, it is critical to
read the documentation to understand implications and the appropriate procedures to avoid data loss.
]]>
</description>
<version>2.21.0</version>
<licence>agpl</licence>
@ -21,12 +37,15 @@ Please read the documentation to know all implications before you decide to enab
<types>
<filesystem/>
</types>
<documentation>
<user>user-encryption</user>
<admin>admin-encryption</admin>
</documentation>
<category>files</category>
<category>security</category>
<bugs>https://github.com/nextcloud/server/issues</bugs>
<dependencies>