QuantumBadger / QuantumBadger/RedReader

feature - increase on disk security

Open
#148 2 comments 3 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Enhancement
Dominant language
Java
Stars
2.7k
Forks
527
Avg merge
20d 10h
Merged PRs (30d)
3

Description

Hello. This is follow on from #147

The guardianproject created a number of libraries for developers to use in their software to improve their security.

I would like to make the suggestion that you implement their IOCipher and SQLCipher[1] libraries into RedReader

The biggest benefits would be

IOCipher:

  • On install users could create a password specific to RedReader, this would then protect all RedReader files inside an encrypted container.

If on install a user chose not to set a password RedReader would be stored on the device as normal

SQLCipher

  • provide an encrypted sqlite database to ensure information is kept secure.

[1] https://guardianproject.info/code/iocipher/
https://guardianproject.info/code/sqlcipher/

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the IOCipher and SQLCipher documentation linked in the issue, then assess how their optional password flow would fit RedReader. Define the storage and installation entry points before implementation; done means user-selected encryption protects RedReader files and the SQLite database, while opting out preserves normal storage.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, sqlite
Domain
databases, mobile-dev, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.