Encrypting files during upload

[David Berman]

For security purposes, it is important to be able to encrypt files before they are committed to disk.  Is it possible to use RadUpload to stream up files and encrypt them as they upload?

With large files, we can have RadUpload automatically save pieces of the file to the temp folder as they upload.  However, is it possible to have them be encrypted?  I think the flow would be something like:

- User clicks upload button
- File up to 2 GB IIS limit in size starts uploading
- HttpModule stores pieces of file as encrypted chunks, saving to disk
- OnUploadComplete event fires, passing an InputStream.  We can now read from the InputStream (automatically decrypted) and now apply our own encryption method to store the file in its final form?

We don't want the file contents to be intercepted as they are written to disk on the server; essentially they must be encrypted at all times when not in memory.

Is it possible to achieve this effect?  I saw a post on the RadUpload forum from 2007 (http://www.telerik.com/community/forums/thread/b311D-tadac.aspx) that says you expect to have some encryption feature for RadUpload in a future version.  Is this available yet?

Thank you.

David

[Paul]

Hello David,

Unfortunately, this functionality is not implemented yet. It is in our ToDo list, but its priority is very low.

Greetings,
Paul
the Telerik team

Instantly find answers to your questions at the new Telerik Support Center

[Tim]

Related to this, even without encrypting-as-you-go, is it the case you do NOT support streaming uploading of even the native bytes?  At first blush I thought your overview said yes, but now it seems more like the only option is to fully upload a file and only THEN can you get at the data as a stream.  I was hoping your product let me respond to an event server-side that meant a new buffer of data just arrived, in order to limit how much memory or disk space I use server side.  We're looking at streaming such incoming data directly into the new FileStream feature of SQL Server 2008. If I have to suck up the whole file first on the server I'm much less interested.

Tim

[Atanas Korchev]

Hi Tim,

RadUpload does not support the requested feature. All files are uploaded at once and the user gets access to them after the postback has been made.

Regards,
Albert
the Telerik team

Check out Telerik Trainer, the state of the art learning tool for Telerik products.

[Alexander]

I think Tim's suggestion is excellent. Particularly because RadUpload does not work in a fully AJAX enabled environment.
An option for using streamed upload paired with a webservice or something instead of full postback would fix this.
I want one of those!

Now I have to change our native application to use a popup page to upload files. It's a hassle.

regards
Alexander