Method to recover encrypted structured files
A method for recovering encrypted content from structured files is provided. During an encryption process, a known pattern of metadata may be inserted into each of a set of headers of the encrypted content and each of a set of footers of the encrypted content. The processing logic may insert the encrypted content into a structured file and subsequently (e.g., during an attempt to access the content) detect that a structure of the structured file has been damaged. The encrypted content may be identified by identifying one or more of the set of headers and one or more of the set of footers of the encrypted content. In this way, the method allows for partial recovery of encrypted content and prevents total loss of the content in situations where the structure of the file including the encrypted content is damaged.
1. A method comprising:
encrypting content to generate encrypted content;
inserting a known pattern of metadata into each of a set of headers of the encrypted content and each of a set of footers of the encrypted content;
inserting the encrypted content into a structured file;
detecting that a structure of the structured file has been damaged;
identifying the encrypted content based at least in part on identifying one or more of the set of headers and one or more of the set of footers of the encrypted content; and
decrypting the encrypted content.
2. The method of claim 1 , further comprising:
dividing the content into a set of chunks, wherein encrypting the content comprises appending a header and a footer to each chunk in the set of chunks, and wherein inserting the known pattern of metadata comprises inserting the known pattern of metadata into the header and the footer of each chunk in the set of chunks.
3. The method of claim 2 , wherein the dividing is performed using a deterministic algorithm.
4. The method of claim 2 , wherein identifying the encrypted content comprises identifying one or more chunks of the set of chunks by identifying both a header and a footer of each of the one or more chunks.
5. The method of claim 4 , wherein each of the one or more chunks are unaffected by damage to the structure of the structured file.
6. The method of claim 2 , wherein detecting that a structure of the structured file has been damaged comprises detecting that a header or footer of one or more chunks of the set of chunks has been damaged or an internal file structure of the structured file has been damaged.
7. The method of claim 1 , wherein the known pattern of metadata comprises a special pattern, an original file name of the content, an encryption standard used to encrypt the content, a version number of the encryption standard used and an ID of an encryption key used to encrypt the content.
8. A system comprising:
a processor; and
a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform data storage operations, the operations including:
encrypting content to generate encrypted content;
inserting a known pattern of metadata into each of a set of headers of the encrypted content and each of a set of footers of the encrypted content;
inserting the encrypted content into a structured file;
detecting that a structure of the structured file has been damaged;
identifying the encrypted content based at least in part on identifying one or more of the set of headers and one or more of the set of footers of the encrypted content; and
decrypting the encrypted content.
9. The system of claim 8 , the operations further comprising:
dividing the content into a set of chunks, wherein encrypting the content comprises appending a header and a footer to each chunk in the set of chunks, and wherein inserting the known pattern of metadata comprises inserting the known pattern of metadata into the header and the footer of each chunk in the set of chunks.
10. The system of claim 9 , wherein the dividing is performed using a deterministic algorithm.
11. The system of claim 9 , wherein identifying the encrypted content comprises identifying one or more chunks of the set of chunks by identifying both a header and a footer of each of the one or more chunks.
12. The system of claim 11 , wherein each of the one or more chunks are unaffected by damage to the structure of the structured file.
13. The system of claim 9 , wherein detecting that a structure of the structured file has been damaged comprises detecting that a header or footer of one or more chunks of the set of chunks has been damaged or an internal file structure of the structured file has been damaged.
14. The system of claim 8 , wherein the known pattern of metadata comprises a special pattern, an original file name of the content, an encryption standard used to encrypt the content, a version number of the encryption standard used and an ID of an encryption key used to encrypt the content.
15. A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations, the operations comprising:
encrypting content to generate encrypted content;
inserting a known pattern of metadata into each of a set of headers of the encrypted content and each of a set of footers of the encrypted content;
inserting the encrypted content into a structured file;
detecting that a structure of the structured file has been damaged;
identifying the encrypted content based at least in part on identifying one or more of the set of headers and one or more of the set of footers of the encrypted content; and
decrypting the encrypted content.
16. The non-transitory machine-readable medium of claim 15 , the operations further comprising:
dividing the content into a set of chunks, wherein encrypting the content comprises appending a header and a footer to each chunk in the set of chunks, and wherein inserting the known pattern of metadata comprises inserting the known pattern of metadata into the header and the footer of each chunk in the set of chunks.
17. The non-transitory machine-readable medium of claim 16 , wherein the dividing is performed using a deterministic algorithm.
18. The non-transitory machine-readable medium of claim 16 , wherein identifying the encrypted content comprises identifying one or more chunks of the set of chunks by identifying both a header and a footer of each of the one or more chunks.
19. The method of claim 18 , wherein each of the one or more chunks are unaffected by damage to the structure of the structured file.
20. The non-transitory machine-readable medium of claim 15 , wherein the known pattern of metadata comprises a special pattern, an original file name of the content, an encryption standard used to encrypt the content, a version number of the encryption standard used and an ID of an encryption key used to encrypt the content.