search

marcelkalveram / react-native-bulletproof-redux-provider

A bulletproof Redux provider for secure encryption of your user's data
MIT License
21 stars 9 forks source link

Can we have some examples regarding how to differentiate where we need secure storage? #1

Open velykovits opened 3 years ago

velykovits commented 3 years ago

First of all, thank you for your work, your lib solves a real issue by balancing between the secure vs larger sized data storage in redux store.

After reading the Medium article, I am still not sure about how your lib knows where to use secure storage and where just normal AsyncStore is enough.

Do we have flags to explicitely tell the lib, this part is secure, please encrypt it or it works only based on the size of the blob?

If we could have a very short example, that would be a great help that would show a use case if we store normal, unencrypted data with a passport that should be encrypted.

Thank you for your help in advance!

marcelkalveram commented 3 years ago

@velykovits thanks for your interest.

The library uses AsyncStorage exclusively for data storage. However, the data in there isn't readable by humans, and can't be encrypted without the secure key. The secure key is stored via a separate, fully encrypted storage mechanism, the Keychain (iOS) and Keystore (Android) library.

Maybe that could have been made clearer in the blog post? I'm happy to update it if needed, so other people will understand this as well.