3 ms·

If you're starting a new startup, it's now honestly unacceptable to not have encryption come standard. I'm building an open standard for encryption and ownersh

by mobitar 10y ago

If you're starting a new startup, it's now honestly unacceptable to not have encryption come standard. I'm building an open standard for encryption and ownership of notes. Would love any feedback/help. See https://standardnotes.org https://standardnotes.org for the full spec. Or follow along @standardnotes on Twitter. If you'd like to contribute, ping me.

nawtacawp 10y ago
"Encryption keys are generated by stretching the user's input password using PBKDF2. The resulting 512 bit key is then split in two - the first half is sent to the server as the user's password, and the second half is saved locally as the user's master encryption key. This way, the server can never calculate the encryption key." Can you link to the class on your github for this?
- mobitar 10y ago
  It's handled by the client: https://github.com/neeto-project/neeto-web-client/blob/master/app/assets/javascripts/app/services/helpers/crypto.js#L29 https://github.com/neeto-project/neeto-web-client/blob/maste... I'm transitioning from using a standard of 3000 iterations of PBKDF2 to a variable amount per user (CryptoJS can't handle more than 3000, WebCrypto can, not universal yet though)