Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

What's the mechanism behind crypto-file ? And what's the difference between crypt-file and crypto-file ? #22

Open
inclusiveFuture opened this issue Nov 6, 2021 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@inclusiveFuture
Copy link

Hello, I have a question for cordova-plugin-crypto-file,

So I know the repository is generating random password at compilation (cordova prepare/ run/build) and using that to encrypt file, I have the following questions:

I was wondering what's the algorithm for generating random password?
What encryption algorithm and how strong is it (AES256?)
Can it be a next feature to allow users manually configure these settings like changing the encryption type and level of encryption?

And finally I was wondering how do you store the password? Because every time you open the app, the first thing the app do is to decrypt the files , so I guess the password is stored inside the APK/APP.
Given the hypothesis that the password for decryption is stored inside APK/APP, how is this password being protected/shielded from attacker?
Because if the effort for attacker to decrypt the password is less than the effort for attacker to force decrypt the actual file, the encryption of the file doesn't make much sense then (it will just be a decoration then).

Thank you very much for answering the question.

@inclusiveFuture inclusiveFuture added the enhancement New feature or request label Nov 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants