On Tue, Oct 21, 2014, at 01:19 PM, Richard Newman wrote: > Came across this today. > > https://code.facebook.com/posts/1419122541659395/introducing-conceal-efficient-storage-encryption-for-android/ > > http://facebook.github.io/conceal/ > > I find it interesting that — as we almost did at one point — they’ve > chopped down OpenSSL to 85KB, wrapped it in Java, and ended up with an > efficient storage interface for encrypted data. > > This might finally put us in a place where we’re OK keeping profiles on > an SD card. We might also consider using this for secure backup/restore > of profile data.
I'd also like to point you to IOCipher, which is our virtual encrypted filesystem API built upon SQLCipher. It has a really simple API (mirrors the java.io.File API), performance is excellent (we stream video into it), and you can have a single blob container file on the SD Card/public storage, and not worry about encrypting each file, or leaking metadata based on file names, etc. https://guardianproject.info/code/iocipher/ https://github.com/guardianproject/iocipher Conceal's approach to minimizing OpenSSL is impressive though... must look into that! -- Nathan of Guardian [email protected] _______________________________________________ mobile-firefox-dev mailing list [email protected] https://mail.mozilla.org/listinfo/mobile-firefox-dev
