[Feature request] Check encryptionCipher is correct or not before Hive.openBox method call
- Dominant language
- Dart
- Stars
- 4.4k
- Forks
- 449
- PR merge metrics
- No merged PRs in 30d
Description
I'm developing an app that users can enter the password to access the local database. For Security reasons, this password is not stored on our server at any time. When the app is uninstalled and installed again, the database is recovered. In this phase user must enter password and we must check the entered password is correct or not. When the wrong password is entered and `Hive.openBox` method is called, **the length of the box file becomes zero**.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start at the Hive.openBox call and the encryption handling for an existing recovered database. Reproduce opening the box with an incorrect password and observe the zero-length file behavior. Done means an invalid encryption password is detected without destroying or truncating the existing box data.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- dart
- Domain
- database, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100