isar / isar/hive

[Feature request] Check encryptionCipher is correct or not before Hive.openBox method call

Open
#1,130 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Dart
Stars
4.4k
Forks
449
PR merge metrics
No merged PRs in 30d

Description

I'm developing an app that users can enter the password to access the local database. For Security reasons, this password is not stored on our server at any time. When the app is uninstalled and installed again, the database is recovered. In this phase user must enter password and we must check the entered password is correct or not. When the wrong password is entered and `Hive.openBox` method is called, **the length of the box file becomes zero**.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start at the Hive.openBox call and the encryption handling for an existing recovered database. Reproduce opening the box with an incorrect password and observe the zero-length file behavior. Done means an invalid encryption password is detected without destroying or truncating the existing box data.

Written by the indexing model from the issue text.

Assessment

Tech stack
dart
Domain
database, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.