Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't re-encrypt all encrypted docs on a password change #50

Open
Terreii opened this issue Nov 29, 2018 · 0 comments
Open

Don't re-encrypt all encrypted docs on a password change #50

Terreii opened this issue Nov 29, 2018 · 0 comments

Comments

@Terreii
Copy link
Owner

Terreii commented Nov 29, 2018

Is your feature request related to a problem? Please describe.
Whenever the crypto-password is changed, all encrypted documents are re-encrypted!

Describe the solution you'd like
Generate a internal password on every password change (and the setup). And use this internal password to encrypt documents. The new internal password and all old ones can be stored in documents that are then encrypted in the users crypto-password.

Describe alternatives you've considered
The current implementation works fine but takes up much space on the server and over the network.

Additional context
The biggest problem lies in syncing. In the old implementation, the user could be asked for the old password and the old salt could be gathered from the salt-doc history.
Also any internal password would have to have an id (UUID from hoodie on add?). And every document that is encrypted with this password would also store that id.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant