Encryption At Rest

[taythebot]

Looking to implement encryption for the data files. I propose following Bitwarden's encryption guide.

The encryption algorithm will be AES-CBC-256 and will use PBKDF2 SHA-256 to derive an encryption key from the master password. PBKDF2 will use 100,001 iterations.

Decryption will occur when a user enters a new day. Whenever a change is made, the entire data will be encrypted and then the file will be overwritten.

I also propose using the library Forge, which is an encryption library for Node that is optimized for applications with heavy network usage. This is to accommodate for sync in the future.

[sh9351]

I think this is quite a good idea, but will be useless unless making a specific lock or something like that...

[lostdesign]

The App would request a password on boot up to decrypt the local files, otherwise you would not be able to see anything as they are encrypted.

Overall we'll need to check how to implement it with the syncing solution we are going to implement. I guess the current path wont support encrypted data, atleast I believe it wont - but we haven't tested it yet.