search

wwWallet / wallet-frontend

BSD 2-Clause "Simplified" License
24 stars 7 forks source link

Eliminate session key #304

Closed emlun closed 3 months ago

emlun commented 3 months ago

As highlighted in the self-critique of the v3 encryption architecture: Now that the main key can be easily rotated, the session key is no longer needed as we can simply rotate the main key whenever we make a change to the encrypted data. Eliminating the session key simplifies this key rotation on updating the encrypted data.

This depends on:

emlun commented 3 months ago

I will also update the encryption architecture docs (see also https://github.com/wwWallet/wallet-docs/pull/8 which is still pending) to reflect this change.

emlun commented 3 months ago

Documentation PR: