Note encryption: 10 lines for encryption, 1500 lines for key management
summary
Claim: 10 lines for encryption, 1500 lines for key management. Implements per-note end-to-end encryption in Bear using AES-256-GCM with random IVs and per-note unique keys, derives an application key from a user passphrase plus salt, syncs encrypted passphrase via iCloud keychain, zeroes keys in memory, adds versioning, encrypted hints and monotonic timers. Result is fast cross-device sync on iOS and macOS; encryption itself is tiny, key-management and UX glue are the bulk and they work.
AI-written summary · about
chapters (7)
- 0:00Start
- 8:12Lines of defense
- 10:37End-to-end encryption in Bear
- 15:29Trust model
- 20:44Notes encryption
- 21:38Overlapped security controls
- 23:28Hint encryption
related talks
58m10 Lines of Encryption, 1500 Lines of Key Management- 58m10 Lines of Encryption, 1500 Lines of Key Management
24mEnd-to-End encryption for iOS Developer
23mKeeping secrets with JavaScript
34mEncrypting Data in the Browser - Exploring Web Crypto APIs
29mProtecting data vs systems: practicality, performance, and problems...
50mBuilding Production-Grade End to End Encrypted App...
05mEnd to End Encryption for Mobile Developers