AESPaste - Security Information

This paste-sharing application uses advanced encryption to ensure that the content of your pastes is only visible to those who have the correct decryption key.

Encryption Process

Algorithm: We use the Advanced Encryption Standard (AES) with a 256-bit key length (AES-256) for encryption. AES-256 is a highly secure and industry-standard encryption algorithm, widely used for protecting sensitive data.

Key Management: Users provide a passphrase (encryption key), which is hashed using the SHA-256 algorithm to generate a 256-bit key. This key is never sent to the server, ensuring complete privacy.

Client-Side Encryption: Before any content is sent to the server, it is encrypted in your browser using the AES-CBC (Cipher Block Chaining) mode of operation. This process combines your data with a randomly generated initialization vector (IV) for each encryption operation, ensuring that identical data encrypted multiple times will produce different ciphertexts.

Decryption Process

Client-Side Decryption: Encrypted pastes are decrypted in your browser after you provide the correct decryption key. The key is hashed and used to reverse the AES-256 encryption process, restoring the original content. The server does not have access to the key or the unencrypted content.

Initialization Vector (IV): The first 16 bytes of the encrypted content contain the IV, which is required for decryption. This ensures the integrity and consistency of the decryption process.

Database Security

Even in the unlikely event of a database compromise, encrypted content cannot be decrypted without the corresponding key. Because the key is only known to the user and is never stored or transmitted, your data remains secure.

Why Use Classic CAPTCHA?

To protect our service from spam while allowing access from Tor, VPNs, and proxy users, we have implemented a classic CAPTCHA system. Unlike modern CAPTCHAs like reCAPTCHA, which may block or challenge users from anonymized networks excessively, classic CAPTCHAs offer a consistent and predictable user experience.

If you have any questions, please contact us at info@aespaste.com.

Features | Security Info | New Paste | Contact Us