search

Laverna / laverna

Laverna is a JavaScript note taking application with Markdown editor and encryption support. Consider it like open source alternative to Evernote.
https://laverna.cc/index.html
Mozilla Public License 2.0
9.19k stars 801 forks source link

Document how cryptography is used #169

Open LudovicRousseau opened 10 years ago

LudovicRousseau commented 10 years ago

I see that Laverna can cypher the notes. That is perfect and mandatory for notes stored on an external server like dropbox.

Can you document how the cryptography is used? What cryptographic algorithm is used? How are used the different cyphering parameters (salt, force, etc.)?

I think I should look at https://github.com/Laverna/laverna/tree/master/app/scripts/apps/encryption but I could not find the algorithms. Thanks

wwebfor commented 10 years ago

We use SJCL, which uses AES algorithm.

If you want to review the code and see how it is used you should look at https://github.com/Laverna/laverna/blob/master/app/scripts/apps/encryption/auth.js and https://github.com/Laverna/laverna/blob/master/app/scripts/apps/encryption/encrypt/modelEncrypt.js

ghost commented 9 years ago

A Wiki documentation is recommended, even if you could review the code for your self. So it would answer question on how to restore notes when you have your private keys or just want to know if synchronisation with encryption enabled works.

Best practice would be that the one respnsible for programming that would do a quick writing on the wiki.

(Despite mention all other undocumented stuff around here. :( )