capacitor-secure-storage-plugin
capacitor-secure-storage-plugin copied to clipboard
Hardware-backed / Secure Enclave Crypto
Good morning,
I would like to understand if this plugin rely on Hardware / Secure Enclave / HSM generated keys when data are going to be ciphered to be stored in the Keychain/Keystore storage.
My understanding is that :
- iOS: the Keychain mecanism rely automatically on the use of cryptographic keys generated and stored in the secure enclave since iPhone 5S and later
- Android: it is unclear if the keys used to cipher data for storage in Keystore are generated and stored in hardware-backed crypto services (I read https://source.android.com/security/keystore but it remains unclear if the Key Attestation specifying harware backed crypto are set in this plugin ?)
Could you provide this information ?
Best regards