What is encrypted cloud storage?
Files are scrambled with an algorithm and a key. Anyone holding the key can restore the original; anyone without it sees noise.
Encrypted cloud storage, and what comes after it.
Encryption protects data with mathematics and keys. Citadel adds a physics-based protection layer designed around a different security model.
What is zero-knowledge encryption?
A model where the provider never holds your key, so it cannot read your data. It is a meaningful improvement — and it still depends entirely on a key.
Where does Citadel differ?
Citadel does not rely on a key remaining secret or an algorithm remaining unbroken. Data is reduced and separated so that no single location holds anything meaningful.
Every Citadel subscription protects more than storage.
Citadel is priced for the people who use it and the work they do. The service connects identity, networking, transport, protected data, recovery and business continuity in one architecture.
Identity
Quantum-Secure® authentication designed to reduce dependence on traditional key-based access.
Network
Quantum-Secure® private networking extends protection beyond the storage environment.
Transport
ParticleMesh™ protects data as it moves between people, applications, clouds and infrastructure.
Data
Secured2 protection is applied to the data itself, beyond conventional encryption at rest.
Resilience
Multi-location redundancy, recovery and business continuity reduce dependence on any single system.
Risk
Eligible deployments can include contractual cyber-risk indemnification backed by a Lloyd's of London insurance policy.*
* Insurance, indemnification, coverage limits, exclusions, eligibility and availability are subject to the applicable policy and contractual terms.
Three ways key-based protection fails.
The key is stolen, along with everything it opens. The key is compelled, by a subpoena, a regulator or an employer. Or the algorithm is eventually outpaced by better mathematics and faster machines.
None of these require an attacker to break the encryption in the moment. They only require patience.
Harvest now, decrypt later.
Encrypted data taken today is being stored for the day it becomes readable. For files with a ten- or twenty-year sensitivity horizon — patents, deals, medical records, keys — that is a live risk, not a theoretical one.
Distributed, meaningless fragments do not become readable when computing improves. There is nothing coherent to decrypt.
Encryption and physics-based protection side by side
| Question | Answer |
|---|---|
| What protects the data? | Encryption: an algorithm plus a secret key. Citadel: reduction, separation and distribution of the data itself. |
| What does an attacker get from one location? | Encryption: a complete ciphertext to work on. Citadel: a fragment with no independent meaning. |
| What happens if the key leaks? | Encryption: the data is readable. Citadel: there is no key that reconstructs a file on its own. |
| What about future computing power? | Encryption: harvested data may become readable. Citadel: fragments remain meaningless. |
Questions people ask
- Does Citadel still use encryption?
- Encryption remains part of a layered approach in transit and at rest. The difference is that Citadel does not depend on it as the only thing standing between an attacker and your file.
- Is this the same as zero-knowledge storage?
- No. Zero-knowledge storage moves the key to you. Citadel changes what is stored so a key is not the deciding factor.
- Is encryption no longer worth using?
- It is absolutely worth using. It is simply not sufficient on its own for data with a long sensitivity life.
Keep reading
Protect what matters most.
Citadel is accepted by a limited number of organisations each quarter. See the plans and start with the data you cannot afford to lose.