stakwork / sphinx-kotlin-core

MIT License
0 stars 2 forks source link

Investigation: SqlDriver cached regardless of encryptionKey #17

Open kngako opened 2 years ago

kngako commented 2 years ago

The sql database will be ideally encrypted using the encryptionKey, but the app implementation currently caches the SqlDriver (which would then provided decrypted access to the DB). Can a person break security assumptions if a logged out (requiring pin to unlock) execution of the app is accessed in a manner that exploits the cache?