budgie

budgie

Anyone have success doing this?

  • What are you doing for key management on the client side and how does this work together with encrypted fields in Ecto?
  • How do you manage keys when it comes to teams or organizations, so that members of the organization can access and modify the data?

Any papers or resources you can point me to would be amazing. There are lots of companies doing this kind of work at the moment, but there’s still not a ton of info published on building privacy-preserving apps in this way.

Showing Posts 1 to 3

ruslandoga

ruslandoga

:wave:

A bit off-topic, but I used GitHub - signalapp/libsignal: Home to the Signal Protocol as well as other cryptographic primitives which make Signal possible. · GitHub for an iOS app a long time ago with Phoenix Channels. The backend part was pretty “dumb” and all it did was store blobs of encrypted messages and move identity keys and prekeys around.

D4no0

D4no0

This seems more like an entire frontend problem, as you don’t want the server to actually manage encryption/decryption or the keys, otherwise it defeats the propose of the server not having access to the data.

jstimps

jstimps

LiveSecret does E2EE with Phoenix/LiveView. The implementation might be able to serve as a basis for a more sophisticated app. Happy to answer any questions.

The key management is essentially:

  1. Passphrase is generated in the browser
  2. Secret cleartext is encrypted in the browser
  3. Ciphertext is sent to the server and stored in the DB
  4. Passphrase is never sent to the server. The user of LiveSecret decides how to protect the passphrase.
  5. On the receiving side, LiveView delivers the ciphertext and the receiving user provides the passphrase.
  6. The decryption happens in the browser.
— All posts loaded —

Where Next? Top

Trending in Discussions Top

AstonJ
As the title says, please share what you’ve been up to with Elixir. Whether that’s been learning it, looking into it, making stuff with i...
2977 94592 917
New
cblavier
Hey there, It’s been more than a year since we started using LiveView as our main UI library and building a whole library of UI componen...
New
mudasobwa
I am happy to introduce the very α version of the new programming language compiled to BEAM. Welcome Cure. It has literally three kille...
New
heathen
Quite interesting article Google brought me. Didn’t find any mentions about it here. What do you think in general? Would you use togethe...
New
maennchen
:warning: Security advisory: Decimal DoS vulnerability A vulnerability has been published for decimal where very large exponents can cau...
New
marciol
It would be helpful to have a list of companies worldwide that hire engineers without prior experience in Elixir. Often, it can be quite ...
New
Null-logic-0
What IDE or editor are you using for Elixir development? Personally, I use Zed, and I really like it, but sometimes I wish there were a ...
New

Other Trending Topics Top

marciok
Hi there! We created Gust: A task orchestrator inspired by Airflow. For those who have never heard about Aiflow, it’s a Python-based wor...
New
jimsynz
Beam Bots (or just BB for short) is a framework for building fault-tolerant robotics applications in Elixir using familiar OTP patterns. ...
New
Dmk
Xamal is a deployment tool for Elixir apps that deploys native releases to bare metal servers over SSH. It’s a port of GitHub - basecamp/...
New
netoum
Corex is an accessible, unstyled UI component library for Phoenix that integrates Zag.js state machines using Vanilla JavaScript and Live...
New
webofbits
With AI doing more of the implementation work, I’ve been wondering how much coding I should deliberately keep doing myself. My main conc...
#ai
New
webofbits
Aludel - LLM Evaluation Workbench Aludel is an embeddable Phoenix LiveView dashboard for evaluating and comparing LLM prompts across mult...
New

We're in Beta

About us Mission Statement

Options

Thread Display Mode




Thread Preview

Skip Thread Previews