capacitor-secure-storage-plugin icon indicating copy to clipboard operation
capacitor-secure-storage-plugin copied to clipboard

Hardware-backed / Secure Enclave Crypto

Open mobilityvalley opened this issue 3 years ago • 0 comments

Good morning,

I would like to understand if this plugin rely on Hardware / Secure Enclave / HSM generated keys when data are going to be ciphered to be stored in the Keychain/Keystore storage.

My understanding is that :

  • iOS: the Keychain mecanism rely automatically on the use of cryptographic keys generated and stored in the secure enclave since iPhone 5S and later
  • Android: it is unclear if the keys used to cipher data for storage in Keystore are generated and stored in hardware-backed crypto services (I read https://source.android.com/security/keystore but it remains unclear if the Key Attestation specifying harware backed crypto are set in this plugin ?)

Could you provide this information ?

Best regards

mobilityvalley avatar Mar 24 '21 09:03 mobilityvalley