Mark/kimi_agent_kin_app_sync
1
0
Fork 0
Code Issues 3 Pull requests Projects Releases 2 Packages Wiki Activity Actions

[Vault] Data encryption at rest #78

New issue
Closed
opened 2026-06-09 01:49:25 +00:00 by Mark · 0 comments
Mark commented 2026-06-09 01:49:25 +00:00
Owner
Copy link

Parent: #26

Encrypt vault contact data stored in IndexedDB.

  • Choose encryption strategy (Web Crypto API SubtleCrypto AES-GCM)
  • Derive encryption key from vault PIN
  • Encrypt inVault contact names, notes, and interaction details before storing
  • Decrypt only when vault is unlocked
  • Store salt/IV alongside encrypted data
  • Wipe decryption key on lock (not persisted to disk)
  • Handle key rotation on PIN change (re-encrypt all vault data with new key)
**Parent:** #26 Encrypt vault contact data stored in IndexedDB. - [ ] Choose encryption strategy (Web Crypto API SubtleCrypto AES-GCM) - [ ] Derive encryption key from vault PIN - [ ] Encrypt inVault contact names, notes, and interaction details before storing - [ ] Decrypt only when vault is unlocked - [ ] Store salt/IV alongside encrypted data - [ ] Wipe decryption key on lock (not persisted to disk) - [ ] Handle key rotation on PIN change (re-encrypt all vault data with new key)
Mark closed this issue 2026-06-13 18:20:51 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
v1.1.0
v1.0.0
Labels
Clear labels   
blocked:depends-p1

Depends on #139 (P1) landing first. Picker should not auto-dispatch.

  
blocked:gate-research

   
blocked:lint-failed

   
blocked:needs-decision

   
blocked:needs-human

   
blocked:verify-failed

   
bug

   
data-loss

Data integrity or data loss risk

  
documentation

   
enhancement

   
feature-request

   
in-progress

   
needs-decompose

Issue needs decompose processing

  
needs-triage

   
pwa

Progressive Web App functionality

  
quickfix

   
security

Security vulnerability or hardening

  
security/high

High severity security issue

  
security/medium

Medium severity security issue

  
test

   
test-coverage

Test coverage review / gap report

  
triage-approved

Approved for automated fix pipeline

  
vault

Requires vault/LBB authentication (#26) — discretion-sensitive feature

No labels
blocked:depends-p1
blocked:gate-research
blocked:lint-failed
blocked:needs-decision
blocked:needs-human
blocked:verify-failed
bug
data-loss
documentation
enhancement
feature-request
in-progress
needs-decompose
needs-triage
pwa
quickfix
security
security/high
security/medium
test
test-coverage
triage-approved
vault
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Mark/kimi_agent_kin_app_sync#78
No description provided.