AES-256

AES-256 is a widely recognized symmetric encryption algorithm that uses a 256-bit key. Ubidesk uses its authenticated variant, AES-256-GCM, which protects both the confidentiality and the integrity of the stream.

Every Ubidesk session encrypts its content with AES-256-GCM. The key is derived from a per-session ECDH exchange: it exists only for the duration of the session and is never stored.

In practice

If one session key ever leaked, it would compromise only that session, not the others: each session has its own keys.