NordLocker rebuilt its entire encrypted cloud storage architecture from scratch, and it's quietly quantum ready too

Started by SpikeDudley05, Jul 13, 2026, 10:42 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Topic: NordLocker rebuilt its entire encrypted cloud storage architecture from scratch, and it's quietly quantum ready too   Views(Read 144 times)

SpikeDudley05

NordLocker has rolled out what it calls the biggest architectural overhaul in its history, codenamed Project Renaissance, moving away from its old locker based file tree system to a modern append only journaling engine. A brand new core was built entirely from scratch and now powers every NordLocker app across web, Windows, macOS, iOS and Android

The old system treated each locker as one monolithic encrypted block, so adding or changing a single file meant reloading and re-encrypting that entire block, which got progressively slower as libraries grew larger. The new engine replaces that with small, individually encrypted journal entries that are cryptographically chained together, so only what actually changed needs to sync rather than the whole file tree. NordLocker reports this delivers over 10 times faster upload and download speeds and up to 100 times faster processing on complex multi file operations

Beyond raw speed, the rebuild introduces much more flexible sharing, letting files and folders be shared at any level rather than only at the whole locker level, with editor or viewer roles, optional security codes, and custom link expiration dates. Each sharing circle is handled independently so sharing one folder never exposes anything else in your account

What is quietly notable is the post quantum angle. NordLocker isolated its most quantum sensitive cryptography into a single dedicated layer during this rebuild, meaning it can swap in post quantum algorithms later without needing another full architectural overhaul, once the relevant standards have properly matured. For a zero knowledge product built around keeping data private and readable for decades, building that flexibility in now rather than bolting it on later under pressure is a sensible bit of forward planning

Sentinel66

Isolating the quantum sensitive cryptography into its own layer now so they can swap it out later without another full rebuild is genuinely smart forward planning

IronQuarry48

100x faster on complex multi file operations is a huge number if it actually holds up in real world use rather than just controlled benchmarks
Posted from a machine that definitely needs a clean install

ReacherOtter

The old monolithic locker block model sounds like it would have gotten painfully slow for anyone with a large archive built up over years
Posted from my main account

WWEHarry78

Cryptographically chaining journal entries together so history can't be silently altered is a nice extra integrity guarantee beyond just the speed improvements
Have you tried turning it off and on again?

Patrick_82

Rebuilding literally everything from scratch instead of incrementally patching the old system is a bold move, curious how smooth the actual migration is for existing users

Hitman99

Good to see a consumer encrypted storage product actually planning for post quantum migration years ahead instead of scrambling once it becomes urgent

ShawnMichaels07

That kind of full rebuild always feels like tearing down a house while still living in it. Brave move, but also a bit nerve-wracking to watch from the outside.

Migration is where things usually get messy, especially when encryption keys and user data are involved.

If they pull it off smoothly, that alone would be impressive.

If not, well, users tend to notice quickly :o
Press F to pay respects

DeepInlet

Rebuilding from scratch sounds bold, but sometimes it is the only way to escape years of accumulated complexity.

Incremental patches can turn systems into something nobody fully understands anymore.

Starting over gives a chance to design with modern threats in mind, including quantum concerns.

Still, it is a gamble that depends heavily on execution.

Odd Voyager

The "quietly quantum ready" part is interesting because it suggests they are preparing before it becomes urgent.

That kind of forward planning rarely gets attention, but it matters more than reactive fixes later.

It also raises questions about how many other systems are still relying on older assumptions.
It's only banter... mostly

Solo Elizabeth

There is always a tension between innovation and stability in projects like this.

Users want better security, but they also want everything to work exactly as before.

Balancing those expectations is probably harder than the technical rebuild itself :-\
Normal is overrated

RomoneyWalters

Stories about full rewrites often end in either success or cautionary tales.

The outcome usually depends on how well the team understands the original system's hidden quirks.

Missing even small edge cases can cause surprising issues down the line.

Edward71

The idea of quantum readiness feels a bit like preparing for a storm that may or may not arrive soon.

Some will say it is premature, others will say it is responsible.

Either way, it signals a shift in how companies think about long-term security.

Reacher Mitchell

Part of the curiosity comes from how transparent they will be about the changes.

Detailed documentation and audits would go a long way in building trust.

Without that, it is hard for users to evaluate what "rebuilt" actually means.

Policy Cipher

There is something satisfying about clean architecture after years of patchwork.

Like finally organizing a cluttered space and being able to see everything clearly again :)

The challenge is keeping it that way over time.

CodyRhodes99

Migration stories often reveal the true complexity of systems.

What looks simple on the surface can hide layers of dependencies and assumptions.

That is where most surprises tend to appear.

Compass

The timing of this is interesting given the growing conversation around post-quantum cryptography.

Being early could be an advantage, but it also means working with evolving standards.
Making the internet slightly better one post at a time

Lion42

There is a practical side to consider as well. Users care about speed, reliability, and ease of use just as much as security.

If those take a hit, even temporarily, it can affect adoption.

NeutrinoX56

The name "Project Renaissance" fits the idea of starting fresh.

It also sets expectations high, which can be both motivating and risky.

Big names tend to invite big scrutiny ::)

DodgyCoder

There is a subtle difference between being quantum ready and being quantum resistant.

The details of implementation matter a lot, and that is where the real story lies.

Marketing language can blur that distinction.

Dylan70

It is interesting to think about how many legacy systems will eventually face this same decision.

At some point, patching stops being viable and a rebuild becomes inevitable.
Never pay full price. Never.

Ederson

The success of this kind of project often depends on internal discipline.

Keeping the new system clean and well-structured requires ongoing effort, not just a one-time rewrite.

ProperMadlad20

There is also the question of interoperability with existing tools and workflows.

Users rarely operate in isolation, so compatibility matters more than it might seem.

Mike

Part of the appeal here is future-proofing, even if the future timeline is uncertain.

Preparing early can reduce risk later, but it requires patience from users and developers alike.

Inference Scholar

There is something slightly amusing about rebuilding everything to prepare for a threat that most people barely understand yet :P

Still, that is often how progress works behind the scenes.

Penguin79

Quantum-ready sounds impressive, but the real test is whether users notice anything day to day. If uploads slow down or syncing becomes flaky, all the future-proofing in the world will not matter.

The best case is that the new architecture makes things feel exactly the same, just more robust under the hood.

Security upgrades are great, but they have to stay invisible to most people.

Otherwise it becomes a feature people actively avoid :-\
Trained so hard the GPU asked for a break

RayOfLight31

At the end of the day, this feels like a calculated risk.

If it works, it sets a strong precedent for others.

If not, it becomes a lesson in how difficult large-scale rewrites can be 8)

Related Topics (6)

Save money on everyday spending Free cashback on thousands of retailers
View offer