1. Private Key Storage: Private keys are derived locally from your security factors when you set up them.
2. Time Capsule Keys: The release of "time capsule" keys is governed by strict protocols, ensuring they’re only accessible at the specified time.
3. AES Encryption: We use AES-256, not 512, will fix that typo.
4. End-to-End Encryption: yes, End-to-end encryption requires both you and your beneficiaries to enable security factors.
What are these "security factors" you keep mentioning? It's a vague term and I don't see a definition on your website. Can you also describe how private keys are derived from them? That's what I'm most curious about. Is this derivation process something that could be replicated by an attacker?
I'm sure the product has potential, and lots of effort has gone into it. I also see that criticism is hard, but if you can't be open about these basic questions then there are fundamental problems.
I should say, I'm a fan of crypto' (both types) and i'm likely your target market because currently my plans after death are not nearly as secure as i'd like!
> Each security factor is represented by a public/private key pair, which is used to encrypt your data on your device.
So where are the private keys stored? AFAICT, this is just a web app and I know of no way to securely store a private key from one. Even if there is a desktop application and my private key is stored there, what happens if I lose my desktop? Am I locked out of my will permanently?
> Cipherwill uses Homomorphic encryption to encrypt data pods again, creating a "time capsule" key. This key ensures that the data remains encrypted and inaccessible until a specified time.
Is there anything preventing you from releasing these "time capsule" keys ahead of schedule other than good will?
> Data pods are encrypted using 256 or 512 AES encryption
512 AES encryption? Seeing as AES only goes up to 256, you aren't exactly inspiring confidence here.
> If you and your beneficiaries have security factors enabled, it is impossible for anyone, including Cipherwill, to access or decrypt your data.
So it's end-to-end encrypted only if me and my beneficiaries all choose it to be? That is a very different claim from what's on your main page.
Overall, this "how it works" page is too vague for my liking, and I wouldn't trust this website with my will.