nextCloud-Decryptor
Decrypts server-side encrypted Nextcloud/ownCloud files – without a running Nextcloud instance.
JavaSpring BootApache Tika GPL-3.0
The problem
When a Nextcloud using server-side encryption fails – after a broken server or a lost instance – the files are still physically there but unusable. Without a running Nextcloud you normally can't get back to the plaintext data.
The solution
The nextCloud-Decryptor reconstructs the decrypted files directly from what's left: the encryption metadata in the database and the key files on the filesystem. It locates encrypted files via the database, unwraps user private keys through up to two encryption layers, derives the symmetric AES keys, parses file headers, decrypts the data blocks and validates the result. You get your data back – even without Nextcloud.
Download
The complete project is available for download on GitHub: github.com/sandschm/nextCloud-Decryptor – grab it with git clone or download the ZIP.
Features
- Two modes: User Key (per-user password) and Master Key (single password)
- Compatible from ownCloud 6 to Nextcloud 32+
- Two-layer key unwrapping (Core Crypto and Encryption App)
- Interactive password entry
- Gap report: identifies missing or undecrypted files
- Error resilient: skips failed files and keeps going
- Databases: MySQL, MariaDB and PostgreSQL
- Output validation with Apache Tika
