Tanker: End-to-End Encryption SDK for JavaScript

Re:Tanker: End-to-End Encryption SDK for JavaScript by ricardobeat on Wednesday May 22, 2019 @01:09PM (#19983195)

This doesn’t answer the question. How come the app cannot see the keys? What about the key used to encrypt the client side key?

[ Parent | on HN ]

Re:Tanker: End-to-End Encryption SDK for JavaScript by t2riRXawYxLGGYb on Wednesday May 22, 2019 @03:09PM (#19984433)

This really does answer the question, spot on. The client side app does see the key(s) but it does not send them to the server. This is how E2E encryption works, browser or otherwise.

I'm not sure specifically how Tanker is storing the client-side keys. Generally the client-side keys would be encrypted using an OS-level keychain.

[ Parent | on HN ]

Re:Tanker: End-to-End Encryption SDK for JavaScript by dmerej on Thursday May 23, 2019 @08:32AM (#19991052)

Hi, other Tanker dev here. In the browser, we use IndexedDB (via dexie). Keys are encrypted using a secret that has to be provided when starting a Tanker session.

On mobile we use an SQLCipher DB encrypted with the same secret.

[ Parent | on HN ]