10 Lines of Encryption, 1500 Lines of Key Management
summary
A production note app uses AES-256-GCM for per-note encryption with keys derived by PBKDF2/KDF, but most complexity is in key lifecycle and UX. It describes managing per-note keys derived from a cached app key, synchronizing user passwords encrypted in iCloud Keychain, using biometrics only for unlock, monotonic timers for lock behavior, encrypted password hints, versioned encryption metadata for migrations, and many additional safeguards and incident-handling code supporting the cryptographic implementation.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 2:33GDPR data protection
- 7:07DoD encryption rules
- 13:00Security design process
- 14:27Defense in depth
- 20:40Bear app encryption
- 27:51Bear threat models
- 33:55Bear encryption architecture
- 41:21Bear layered protection
- 47:26Encryption updates
- 49:35Summary
- 53:07Q&A
related talks
58m10 Lines of Encryption, 1500 Lines of Key Management
41mNote encryption: 10 lines for encryption, 1500 lines for key management
23mKeeping secrets with JavaScript
29mProtecting data vs systems: practicality, performance, and problems...
37mKeys from the castle: ancient art of managing keys and trust
24mEnd-to-End encryption for iOS Developer
50mBuilding Production-Grade End to End Encrypted App...
32mEncryption - A Deeper Review