If cloud-based storage vendor Box doesn’t hold encryption keys, then the federal government can’t demand them with a court order. This could be the leading edge of ways to defeat NSA snooping. Box uses 256-bit AES encryption, which is secure.
Box is working on a new idea: letting customers themselves hold the encryption keys. “We are exploring ways that in the future our customer would be responsible for its keys, and that’s something we may make available to some of the largest organizations,” Levie said.