I've been thinking about ways to improve the security of my data stored and backed up using the "3-2-1" method. Moreover by using several layers of encryption to encrypt and decrypt a filesystem structure steps by steps.
Consider the following :
/root |____folder1 |____folder2 |____subfolder1 |____subfolder2 |____sensitivefile1
sensitivefile1 was first encrypted using AES256, then
subfolder2 would be encrypted using a different AES256 key, then
folder2 using yet another key, then
/root using a fourth key and so on ...
I am aware of the fact that since AES 256 is considered strong enough, only one layer would be needed to secure all of this (as mentionned here: Does encrypting data multiple times using different passwords increase security?), but I'm trying to figure whether a system that decrypts the structure as needed instead of decrypting the whole filesystem at once would even make sense.
I've been using MEGA for my cloud storage for a while but it seems to be decrypting my whole filesystem once I log in rather than chunks of it, which I would prefer.
Am I overthinking this ? Would that make sense or is that just a late-night brainfart ? Is this kind of system already used somewhere that I'd be missing or would that actually be less effective (secured) than some other method ?
Looking forward for your thoughts about the matter. Regards,