reclaimthenet.org
Tuta Announces Quantum-Resistant Encrypted Cloud Storage, Tuta Drive
If you're tired of censorship and dystopian threats against civil liberties, subscribe to Reclaim The Net.
Privacy company Tuta is launching an encrypted cloud storage service, and it comes with something most competitors can’t offer: encryption that’s designed to survive quantum computers.
Tuta Drive enters early access today as an invite-only beta, built on the same hybrid cryptographic protocol the German company deployed in Tuta Mail back in early 2024.
That protocol, TutaCrypt, pairs conventional algorithms with quantum-resistant ones, which means files uploaded to Tuta Drive are encrypted with math that current computers can’t break and future quantum machines shouldn’t be able to either.
Every file gets encrypted on your device before it leaves. Tuta’s servers never see the unencrypted version. In a zero-knowledge architecture like this, even a government subpoena can’t produce readable files, because the company genuinely doesn’t have the keys.
This is the product that has been under development for nearly three years. Tuta started the PQDrive research project in July 2023, working alongside the University of Wuppertal to build post-quantum encryption into a cloud storage system from the ground up.
By early 2024, the cryptography was proven enough for email, making Tuta Mail the first provider worldwide to ship quantum-safe encryption by default. Now that same protocol extends to file storage.
“With Tuta Drive, we are taking the next step towards offering a full private digital workspace,” said Arne Möhle, CEO of Tuta.
“Today, more than ten million citizens and businesses, including journalists, whistleblowers and activists use Tuta Mail as an alternative to insecure email offered by mainstream providers.
“Adding an encrypted cloud storage to Tuta will enable them to also store their files securely. This invite-only beta release accumulates all our efforts of the last years. In July 2023, we started an extensive research project with the goal to update the Tuta cryptography to a hybrid protocol with traditional and quantum-resistant algorithms. We achieved this in beginning of 2024, making Tuta Mail the first quantum-safe email provider worldwide. And today we are proud to announce that we are ready to add a Drive solution to Tuta that makes use of the same cryptography.”
Intelligence agencies and sophisticated attackers are already harvesting encrypted data in bulk, banking on the assumption that quantum computers will eventually crack today’s encryption. It’s called “harvest now, decrypt later,” and it transforms every file you store in a conventional cloud service into a future liability.
Your medical records, legal documents, financial statements, business plans, anything uploaded to Google Drive or Dropbox today sits behind encryption that a sufficiently powerful quantum computer could shred. The files don’t need to be interesting right now. They just need to still be sensitive in ten or fifteen years, which most of them will be.
Google, Microsoft, and Dropbox don’t offer end-to-end encryption on their cloud storage by default. They encrypt files in transit and at rest, sure, but they hold the keys. That means they can read your files, law enforcement can compel them to hand files over in readable form, and a breach of their systems exposes actual content. The privacy promise amounts to trusting that they won’t look and that nobody else will successfully break in. It’s a bet that gets worse every year as quantum computing advances accelerate.
Tuta Drive’s hybrid encryption sidesteps this entirely. The protocol combines CRYSTALS-Kyber (a NIST-standardized post-quantum key encapsulation mechanism) with elliptic curve cryptography, layered over AES-256 symmetric encryption. If someone breaks the quantum-safe algorithm, the conventional encryption still holds. If someone breaks the conventional encryption, the quantum-safe layer still holds. An attacker would need to defeat both simultaneously, which is the whole point of a hybrid approach.
The beta is bare-bones for now. It works through the web interface on desktop and mobile, with native apps and a sync client coming later. Users can upload and store files, with sharing features planned. That’s not a lot of polish, but the encryption underneath is the part that actually matters, and Tuta has been hardening it for years across email, calendar, and contact data before extending it to file storage.
Tuta is based in Germany, which means European data protection law applies. More meaningfully, the zero-knowledge architecture makes that jurisdiction question less important than it would be for a service that can actually read your data. When a provider holds no usable decryption keys, the legal framework governing data requests becomes somewhat academic. You don’t have to trust Tuta’s promises about privacy. You have to trust the math, which is open source and available for anyone to audit on GitHub.
During the closed Tuta Drive beta, participants can test core functionality and submit feedback to shape what the final product looks like. Given how long the privacy community has waited for quantum-resistant cloud storage from a provider that isn’t headquartered in a Five Eyes country, the beta can’t come soon enough.
If you're tired of censorship and dystopian threats against civil liberties, subscribe to Reclaim The Net.
The post Tuta Announces Quantum-Resistant Encrypted Cloud Storage, Tuta Drive appeared first on Reclaim The Net.