- FileController encrypts uploads using AES-GCM with salt and IV. - Downloads are decrypted on-the-fly using user-supplied password. - File metadata (salt, IV, username, path) stored in DB.
Kshitij