Skip to content
This repository has been archived by the owner on Sep 19, 2018. It is now read-only.

Use binary keys to protect data #52

Closed
linuxwolf opened this issue Nov 1, 2017 · 0 comments
Closed

Use binary keys to protect data #52

linuxwolf opened this issue Nov 1, 2017 · 0 comments
Assignees
Labels

Comments

@linuxwolf
Copy link
Contributor

linuxwolf commented Nov 1, 2017

In order to support "FxA as Master Password" (mozilla-lockwise/lockbox-extension#209), the datastore needs to support encryption using a binary key.

  • When initialize() is called, allow the API user to pass in a JWK or Uint8Array that represents a symmetric key in order to prepare the databases.
    • Allow the API user to call initialize() without a key, and use a consistent "null" key value to support the low-touch "quickstart"
  • When unlock() is called, allow the API user to pass in a JWK or Uint8Array that represents the symmetric key used when initializing.
    • Allow the API user to call unlock() without a key, and use the default "null" key value
@linuxwolf linuxwolf added backlog We have looked at and understand the issue. Prioritized with alignment to product initiatives. feature labels Nov 1, 2017
@linuxwolf linuxwolf changed the title Use binary keys instead of passwords Use binary keys to protect data Nov 1, 2017
@devinreams devinreams added this to the 0.1.3 milestone Nov 10, 2017
@devinreams devinreams added to do and removed backlog We have looked at and understand the issue. Prioritized with alignment to product initiatives. labels Nov 10, 2017
@linuxwolf linuxwolf added in progress We are actively working on it. and removed to do labels Nov 14, 2017
@devinreams devinreams modified the milestones: 0.1.3, 0.1.4 Nov 28, 2017
@devinreams devinreams removed this from the 0.1.4 milestone Dec 13, 2017
@ghost ghost removed the in progress We are actively working on it. label Dec 14, 2017
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

2 participants