{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,5]],"date-time":"2026-09-05T05:16:38Z","timestamp":1788585398539,"version":"build-2803163510"},"reference-count":43,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Discovery Early Career Researcher","award":["DE260100282"],"award-info":[{"award-number":["DE260100282"]}]},{"name":"ARC Laureate Fellowship","award":["FL230100033"],"award-info":[{"award-number":["FL230100033"]}]},{"name":"ARC Future Fellowship","award":["FT220100046"],"award-info":[{"award-number":["FT220100046"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Cloud Comput."],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/tcc.2026.3697927","type":"journal-article","created":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T19:43:49Z","timestamp":1779911029000},"page":"1602-1615","source":"Crossref","is-referenced-by-count":0,"title":["CloudMirror: Demystifying Seamless End-to-End Encryption in Cloud Storage and Sharing"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7830-5133","authenticated-orcid":false,"given":"Yudi","family":"Zhang","sequence":"first","affiliation":[{"name":"University of Wollongong","place":["Wollongong, NSW, Australia"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1562-5105","authenticated-orcid":false,"given":"Willy","family":"Susilo","sequence":"additional","affiliation":[{"name":"University of Wollongong","place":["Wollongong, NSW, Australia"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6939-7710","authenticated-orcid":false,"given":"Fuchun","family":"Guo","sequence":"additional","affiliation":[{"name":"University of Wollongong","place":["Wollongong, NSW, Australia"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-0786-2489","authenticated-orcid":false,"given":"Shijin","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Wollongong","place":["Wollongong, NSW, Australia"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"81% of companies have had a cloud security incident in the last year","author":"Boose","year":"2022"},{"key":"ref2","article-title":"7 most infamous cloud security breaches","year":"2023"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978375"},{"key":"ref4","first-page":"899","article-title":"Phoenix: Rebirth of a cryptographic password-hardening service","volume-title":"Proc. USENIX Secur. Symp.","author":"Lai","year":"2017"},{"key":"ref5","first-page":"1405","article-title":"Simple password-hardened encryption services","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Lai","year":"2018"},{"key":"ref6","first-page":"2353","article-title":"$\\lbrace${End-to-Same-End$\\rbrace$} encryption: Modularly augmenting an app with an efficient, portable, and blind cloud storage","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Chen","year":"2022"},{"key":"ref7","article-title":"Warning as 26 billion records leak: Dropbox, linkedin, twitter named","author":"Winder","year":"2024"},{"key":"ref8","first-page":"29","article-title":"Plutus: Scalable secure file sharing on untrusted storage","volume-title":"Proc. 2nd USENIX Conf. File Storage Technol.","author":"Kallahalla","year":"2003"},{"key":"ref9","first-page":"131","article-title":"SiRiUS: Securing remote untrusted storage","volume-title":"Proc. Netw. Distrib. Syst. Secur.","author":"Goh","year":"2003"},{"key":"ref10","first-page":"175","article-title":"Policy-sealed data: A new abstraction for building trusted cloud services","volume-title":"Proc. 21st USENIX Secur. Symp.","author":"Santos","year":"2012"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2535929"},{"key":"ref12","first-page":"1519","article-title":"JEDI: Many-to-many end-to-end encryption and key delegation for IoT","volume-title":"Proc. 28th USENIX Secur. Symp.","author":"Kumar","year":"2019"},{"key":"ref13","first-page":"387","article-title":"Zeph: Cryptographic enforcement of end-to-end data privacy","volume-title":"Proc. 15th {USENIX} Symp. Operating Syst. Des. Implementation","author":"Burkhalter","year":"2021"},{"key":"ref14","article-title":"Cryptomator","year":"2026"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3040784"},{"key":"ref16","first-page":"7267","article-title":"A $\\lbrace${Mixed-Methods $\\rbrace$} study on user experiences and challenges of recovery codes for an $\\lbrace${ End-to-End$\\rbrace$} encrypted service","volume-title":"Proc. 33rd USENIX Secur. Symp.","author":"H\u00f6ltervennhoff","year":"2024"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00236"},{"key":"ref18","first-page":"469","article-title":"Formal verification of the $\\lbrace${PQXDH $\\rbrace$}$\\lbrace${ Post-Quantum$\\rbrace$} key agreement protocol for end-to-end secure messaging","volume-title":"Proc. 33rd USENIX Secur. Symp.","author":"Bhargavan","year":"2024"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00048"},{"key":"ref20","article-title":"Dropbox","year":"2026"},{"key":"ref21","article-title":"Google drive","year":"2026"},{"key":"ref22","article-title":"Microsoft onedrive","year":"2026"},{"key":"ref23","article-title":"icloud drive"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21702-9_18"},{"key":"ref25","article-title":"Information technology\u2014Security techniques\u2014Authenticated encryption","year":"2020"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363196"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4880"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417882"},{"key":"ref29","first-page":"2165","article-title":"That was then, this is now: A security evaluation of password generation, storage, and autofill in browser-based password managers","volume-title":"Proc. 29th USENIX Conf. Secur. Symp.","author":"Oesch","year":"2020"},{"key":"ref30","article-title":"Cryptography and SSL\/TLS toolkit","year":"2026"},{"key":"ref31","doi-asserted-by":"crossref","DOI":"10.17487\/rfc2104","article-title":"HMAC: Keyed-hashing for message authentication","volume-title":"Internet Eng. Task Force, Request Comments 2104","author":"Krawczyk","year":"1997"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-014-9185-x"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48184-2_32"},{"key":"ref34","first-page":"611","article-title":"Sieve: Cryptographically enforced access control for user data in untrusted clouds","volume-title":"Proc. 13th {USENIX} Symp. Networked Syst. Des. Implementation","author":"Wang","year":"2016"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180418"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2007.11"},{"key":"ref37","first-page":"157","article-title":"Building web applications on top of encrypted data using Mylar","volume-title":"Proc. 11th USENIX Symp. Networked Syst. Des. Implementation","author":"Popa","year":"2014"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660326"},{"key":"ref39","first-page":"851","article-title":"Ghostor: Toward a secure data-sharing system from decentralized trust","volume-title":"Proc. 17th USENIX Symp. Networked Syst. Des. Implementation","author":"Hu","year":"2020"},{"key":"ref40","article-title":"Boxcryptor"},{"key":"ref41","first-page":"34","article-title":"This poodle bites: Exploiting the SSL 3.0 fallback","volume":"21","author":"M\u00f6ller","year":"2014","journal-title":"Secur. Advisory"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435373"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23357"}],"container-title":["IEEE Transactions on Cloud Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6245519\/11678135\/11536927.pdf?arnumber=11536927","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,5]],"date-time":"2026-09-05T04:44:28Z","timestamp":1788583468000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11536927\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":43,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tcc.2026.3697927","relation":{},"ISSN":["2168-7161","2372-0018"],"issn-type":[{"value":"2168-7161","type":"electronic"},{"value":"2372-0018","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]}}}