Encrypting files during upload

Thread is closed for posting
5 posts, 0 answers
  1. David Berman
    David Berman avatar
    8 posts
    Member since:
    Oct 2007

    Posted 02 Jul 2008 Link to this post

    For security purposes, it is important to be able to encrypt files before they are committed to disk.  Is it possible to use RadUpload to stream up files and encrypt them as they upload?

    With large files, we can have RadUpload automatically save pieces of the file to the temp folder as they upload.  However, is it possible to have them be encrypted?  I think the flow would be something like:

    - User clicks upload button
    - File up to 2 GB IIS limit in size starts uploading
    - HttpModule stores pieces of file as encrypted chunks, saving to disk
    - OnUploadComplete event fires, passing an InputStream.  We can now read from the InputStream (automatically decrypted) and now apply our own encryption method to store the file in its final form?

    We don't want the file contents to be intercepted as they are written to disk on the server; essentially they must be encrypted at all times when not in memory.

    Is it possible to achieve this effect?  I saw a post on the RadUpload forum from 2007 (http://www.telerik.com/community/forums/thread/b311D-tadac.aspx) that says you expect to have some encryption feature for RadUpload in a future version.  Is this available yet?

    Thank you.


  2. Paul
    Paul avatar
    4281 posts

    Posted 03 Jul 2008 Link to this post

    Hello David,

    Unfortunately, this functionality is not implemented yet. It is in our ToDo list, but its priority is very low.

    the Telerik team

    Instantly find answers to your questions at the new Telerik Support Center
  3. Tim
    Tim avatar
    1 posts
    Member since:
    Dec 2008

    Posted 12 Dec 2008 Link to this post

    Related to this, even without encrypting-as-you-go, is it the case you do NOT support streaming uploading of even the native bytes?  At first blush I thought your overview said yes, but now it seems more like the only option is to fully upload a file and only THEN can you get at the data as a stream.  I was hoping your product let me respond to an event server-side that meant a new buffer of data just arrived, in order to limit how much memory or disk space I use server side.  We're looking at streaming such incoming data directly into the new FileStream feature of SQL Server 2008. If I have to suck up the whole file first on the server I'm much less interested.

  4. Atanas Korchev
    Atanas Korchev avatar
    8462 posts

    Posted 15 Dec 2008 Link to this post

    Hi Tim,

    RadUpload does not support the requested feature. All files are uploaded at once and the user gets access to them after the postback has been made.

    the Telerik team

    Check out Telerik Trainer, the state of the art learning tool for Telerik products.
  5. Alexander
    Alexander avatar
    14 posts
    Member since:
    Oct 2007

    Posted 27 Mar 2009 Link to this post

    I think Tim's suggestion is excellent. Particularly because RadUpload does not work in a fully AJAX enabled environment.
    An option for using streamed upload paired with a webservice or something instead of full postback would fix this.
    I want one of those!

    Now I have to change our native application to use a popup page to upload files. It's a hassle.

Back to Top