Confirmed users
358
edits
Services/Sync/KeyRecovery: Difference between revisions
→Sync Key Encryption
| Line 67: | Line 67: | ||
== Sync Key Encryption == | == Sync Key Encryption == | ||
Before uploading to the service, the client encrypts the sync key using its existing standard encryption routines. The encryption key is derived from the username and password using PBKDF2. | Before uploading to the service, the client encrypts the sync key using its existing standard encryption routines. The encryption key is derived from the username and password using PBKDF2. The details that follow are just to explain the process - in the client code this should mostly be a thing layer on top of existing methods such as Utils.deriveKeyFromPassphrase and CryptoWrapper.encrypt. | ||
To encrypt the sync key for storage in the recovery service, the client uses PBKDF2 to derive an appropriate encryption key from the user's account username and password: | To encrypt the sync key for storage in the recovery service, the client uses PBKDF2 to derive an appropriate encryption key from the user's account username and password: | ||