De-Drive: A Zero-Knowledge Hybrid Decentralized Storage Architecture Leveraging IPFS, Ethereum, and Client-Side AES Cryptography

Abstract

The rapid digitalization of global infrastructure has amplified the vulnerabilities inherent in centralized cloud storage systems, where single points of failure, administrative access abuses, and external cyberattacks routinely compromise sensitive data.Traditional cloud architectures rely on centralized trust models that frequently succumb to data breaches and censorship.To address these critical flaws, this paper proposes De-Drive, a zeroknowledge, hybrid decentralized storage application (DApp) that seamlessly integrates Web3 architecture with robust cryptographic protocols.De-Drive leverages a hybrid storage model: heavy file payloads are stored off-chain on the decentralized InterPlanetary File System (IPFS) via Pinata nodes, while the immutable reference links-Content Identifiers (CIDs)-are permanently logged on the Ethereum blockchain (Sepolia Testnet) utilizing a custom, highly gas-optimized Solidity smart contract.To solve the inherent privacy flaws of public IPFS networks, De-Drive implements strict client-side Advanced Encryption Standard (AES) cryptography.Files are converted to Base64 strings and encrypted locally within the React frontend utilizing a user-defined symmetric key prior to network transmission.This architecture ensures absolute zero-knowledge storage; neither the IPFS nodes hosting the data nor the blockchain observers auditing the ledger can decipher the underlying content without the specific decryption key.The proposed architecture successfully resolves the blockchain storage trilemma by delivering a decentralized, immutable, and strictly private data vault, demonstrating significant improvements in cost-efficiency and security over both traditional cloud services and purely on-chain storage alternatives.