2024-07-03, 15:40–16:15 (Europe/Paris), Amphitheater
CryptPad is an open-source end-to-end encrypted collaborative office suite
focusing on being easy to use and protecting the privacy of its user, even
from itself.
In this talk, we will start with an history of CryptPad development before
moving on exciting new improvement both from a security and usability point
of view.
CryptPad is a web-based open-source end-to-end encrypted collaborative office
suite, allowing its users to securely collaborate on multiple kinds of
documents: spreadsheets, rich-text, diagrams… It also includes some tools to
help collaboration in a broader sense such as right management, team
management, calendars, kanban, forms…
The goal of CryptPad is to ensure that user data remains secure even if the
server is corrupted and keeps its interface user-friendly and accessible for
everyone.
However, as the name suggests, it has not started directly in this state and
was initially a proof of concept of encrypted etherpad. From this foundation,
and by noticing that the internal representation of computer data can be
subsumed as “text files”, integration of the several aforementioned
applications has been made possible.
CryptPad remains a living project, and even if its development is more stable
than at its early stage, it continues to evolve.
During this talk, I’ll present CryptPad as a tool, the constraints of having
a “cryptography-driven” model and how to take advantage of it to improve
CryptPad either from a usability point-of-view, or to improve its security…
or both!
I’m Fabrice, R&D Engineer at XWiki, working on CryptPad.
Before that I came from academia, doing my PhD at École Normale Supérieure de Lyon on privacy-enhancing cryptographic constructions before moving my research toward post-quantum cryptography at IIT Madras (India) and PQShield (UK). Now I’m working on developing CryptPad and improving its security.