Redundancy controls in convergent encryption using dynamic salt values

A computer-implemented method comprising:

• obtaining instructions to store a data set on a storage system;
• adding to plaintext of the data set a salt value selected from a constrained number of salt permutations corresponding to a desired redundancy of the data set in the storage system;
• hashing plaintext of the data set with the added salt value according to a cryptographic hashing algorithm to result in a hash value;
• encrypting plaintext of the data set using the hash value as an encryption key to result in ciphertext of the data set;
• and
• in response to determining that the ciphertext of the data set is not currently stored within the storage system, storing the ciphertext of the data set in the storage system.

One or more non-transitory computer-readable media comprising computer-executable instructions that, when executed by a computing system, cause the computing system to:

• obtain instructions to store a data set on a storage system;
• add to plaintext of the data set a salt value selected from a constrained number of salt permutations corresponding to a desired redundancy of the data set in the storage system;
• hash plaintext of the data set with the added salt value according to a cryptographic hashing algorithm to result in a hash value;
• encrypt plaintext of the data set using the hash value as an encryption key to result in ciphertext of the data set;
• and
• in response to a determination that the ciphertext of the data set is not currently stored within the storage system, store the ciphertext of the data set in the storage system.