logic/com.wire.kalium.logic.util/SecurityHelperImpl

SecurityHelperImpl

internal class SecurityHelperImpl(passphraseStorage: PassphraseStorage, databaseMigrator: DatabaseMigrator = ::migrateDatabaseKey, isSqlCipherSaltStored: Boolean = false) : SecurityHelper

Parameters

isSqlCipherSaltStored

whether the global and user databases need their SQLCipher salt stored, because SQLCipher can't keep it in their header. On iOS, where that header stays readable. Their secret, under the same alias, is then 48 random bytes instead of 32: the key followed by its 16-byte salt, so the two can't go missing apart. The salt isn't secret, and rotating the key has to keep it.

Constructors

SecurityHelperImpl

constructor(passphraseStorage: PassphraseStorage, databaseMigrator: DatabaseMigrator = ::migrateDatabaseKey, isSqlCipherSaltStored: Boolean = false)

Functions

clearGlobalDBLegacyKey

open override fun clearGlobalDBLegacyKey()

globalDBKeyMaterial

open override fun globalDBKeyMaterial(databaseExists: Boolean): GlobalDBKeyMaterial

The raw key is generated and stored before it is ever used, so a crash between storing it and rekeying the database only costs an unused alias. The reverse order would lose the database.

globalDBSecretOrNull

open override fun globalDBSecretOrNull(): GlobalDatabaseSecret?

mlsDBSecret

open suspend override fun mlsDBSecret(userId: UserId, rootDir: String): MlsDBSecret

proteusDBSecret

open suspend override fun proteusDBSecret(userId: UserId, rootDir: String): ProteusDBSecret

setDBPassphrase

open override fun setDBPassphrase(key: String, passphrase: String)

userDBOrSecretNull

open override fun userDBOrSecretNull(userId: UserId): UserDBSecret?

userDBSecret

open override fun userDBSecret(userId: UserId, databaseExists: Boolean): UserDBSecret