Encryption
Encryption is part of the security features of Peps.
All connections between client and server are encrypted using TLS.
Encryption is transparent, and applied to all messages and files classified with an "Encrypted" class. We chose not to encrypt everything, as encryption prevents some features (full text search, deduplication, etc.). Encryption uses TweetNaCl to implement curve25519-xsalsa20-poly1305.
Encryption relies on PBKDF2 to derive keys from the user password. Note that if a user looses its password, encrypted content will not be recovered.
More information is available in French in the Chiffrement page.