That was the only method I could think of. Suddenly your files aren't quite so private. If the code is open source, it will be possible to see if this method is used though.

They mention in their TOS that they retain the right to delete duplicate files when more than one user uploads exactly the same file, which is sensible of course. But can anyone tell me how they can do this if they don't have the encryption key?