Comment by dexter313

The user's javascript that encrypted the file can also make a hash send it to mega, and then they check if they already have that.

EDIT: They never get to see your key or what is in the file.