Engineering
Encrypting Uploads Without Breaking Streaming
AES-256-GCM, chunk by chunk.
Ravi Kandaswamy
· 9 min read
Encryption is table stakes, but naive designs break streaming. We chunk, MAC, and verify in 1 MB blocks so seeking mid-file remains O(1). Here is the approach we landed on.