Support for secure private data storage

[pakoito]

Note: it is already possible to use @Convert and your encryption implementation to encrypt single properties. See an example below.

---

Allow configuring the proprietary serialization format to include a layer of security.

Suggestions:

• Full document encryption
• Obfuscate fields via @annotation

[greenrobot]

Didn't get the "Obfuscate fields via @ annotation" part - can you give an example? Thanks.

[pakoito]

This is just a guess because there's no open specification of the format the data is stored on, but could the data stored possibly be read using any binary editor?

If so I'd suggest the possibility of mangling, obfuscating, or doing some kind of reversible operation before storing some fields that could be sensitive, like emails or addresses, so at least they're not plainly searchable with a tool.

[greenrobot]

Ah, you want to encrypt only partially, interesting idea. Not sure how indexing should handle those however. For example you could have a "greater than X" query. Here, an index is only useful if it stores plain values because the order changes once you encrypt.

[pakoito]

I'd solve that with documentation, if you use partial encryption it'd be understandable such fields could not used as indexes.

[bigntallmike]

As to encrypting individual fields:
@EncryptedField
String CCNumber;
results in CCNumber's data being stored encrypted in the back-end and not being searchable.

Now as far as that goes, it can be implemented with getters and setters and storing the encrypted data in something like a Byte array variable instead.

[adoubleu]

Are there any plans for encryption support? Could you provide a schedule for the feature? We have sensible data on our product. Encryption is a MUST have feature, so we might switch to a SQLCipher compatible db if the objectbox encryption-support is far from being released.

Thank you. Best regards from Berlin,

Adrian

[adoubleu]

Do you have any plans to support DB encryption? Would you please provide a timeframe?

Thank you.