Fix Chunk Transfer Between Vaults with Different Encryption

[S4tvara]

Problem

Currently, transferring chunks between vaults with different encryption settings can lead to corrupted data:

• AES → Unencrypted: Chunks get transferred but are corrupted.
• Encrypted vaults with different keys: Transfer fails.

---

Proposed Solution

The correct flow for transferring chunks should be:

1. Take the encrypted chunk from the source vault.
2. Decrypt it using the source vault’s key.
3. Sign the chunk with the sender’s public key.
4. Transfer the chunk to the target vault.
5. Decrypt/re-encrypt based on the target vault’s encryption settings.
6. Store the chunk in the target vault.

---

Flow Diagram

flowchart LR
    subgraph Source Vault
        A1[Encrypted Chunk]
        A2[Decrypt with Source Key]
        A3[Sign with Sender's Public Key]
    end

    subgraph Transfer
        T[Send Chunk to Target Vault]
    end

    subgraph Target Vault
        B1[Receive Chunk]
        B2[Decrypt/Encrypt based on Target Vault Settings]
        B3[Store Chunk]
    end

    A1 --> A2 --> A3 --> T --> B1 --> B2 --> B3

Loading

---

Enhanced Multi-Vault Flow

flowchart LR
    subgraph Vault A
        A1[Encrypted Chunk A1]
        A2[Decrypt with Vault A Key]
        A3[Sign with Vault A Public Key]
    end

    subgraph Vault B
        B1[Encrypted Chunk B1]
        B2[Decrypt with Vault B Key]
        B3[Sign with Vault B Public Key]
    end

    subgraph Vault C
        C1[Encrypted Chunk C1]
        C2[Decrypt with Vault C Key]
        C3[Sign with Vault C Public Key]
    end

    subgraph Transfer
        T1[Send Chunk A1 → Vault B]
        T2[Send Chunk B1 → Vault C]
        T3[Send Chunk C1 → Vault A]
    end

    subgraph Target Vault Handling
        TA[Vault B: Decrypt/Encrypt & Store Chunk]
        TB[Vault C: Decrypt/Encrypt & Store Chunk]
        TC[Vault A: Decrypt/Encrypt & Store Chunk]
    end

    %% Flow connections
    A1 --> A2 --> A3 --> T1 --> TA
    B1 --> B2 --> B3 --> T2 --> TB
    C1 --> C2 --> C3 --> T3 --> TC

Loading

Flow Explanation:

• Each vault decrypts and signs its chunks.
• Chunks are transferred to target vaults.
• Receiving vaults decrypt/re-encrypt according to their encryption settings.
• Ensures safe and consistent transfers even with different vault encryption or keys.

[sathwikshetty33]

Hey @SubstantialCattle5 , I would like to take up this issue, please assign me this.

[sathwikshetty33]

Hey @SubstantialCattle5 , was caught up with some work so i could finish the issue, reassign it to me will finish it soon.

[S4tvara]

Hi @sathwikshetty33,
Since this isn’t a good first issue, could you please share how you plan to approach it before proceeding?

Cheers,
Nilay