NuFilebox Reverse is a zero-knowledge file upload system developed through a research partnership between Nubank and Brazilian universities. The system uses Clojure as its core, implementing client-side encryption before files leave the user's machine, splitting large files into encrypted chunks uploaded directly to S3, and performing malware detection using YARA rules after server-side decryption and reassembly. The architecture ensures the server never accesses unencrypted content, handling files up to 30GB with performance superior to commercial alternatives while maintaining strict security through immutability and functional programming principles.
Table of contents
The context of the problemWhy Clojure became the foundationA security approach that starts on the client sideDecryption, reassembly, and the role of ClojureA second layer of defense with YARA RulesHow the system handled increasingly large filesApplied research with real-world impactSort: