Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Encrypt FHIR engine database via SQLCipher #787

Merged
merged 26 commits into from
Nov 29, 2021
Merged

Encrypt FHIR engine database via SQLCipher #787

merged 26 commits into from
Nov 29, 2021

Commits on Sep 15, 2021

  1. Import SQLCipher dependencies

    @stevenckngaa
    stevenckngaa committed Sep 15, 2021
    Configuration menu
    Copy the full SHA
    e3f45e4 View commit details
    Browse the repository at this point in the history

  2. Generate a 16 bytes key for database encryption 

    Also store the key in EncryptedSharedPreference, which is encrypted by an
application main key from the Android key store.
    @stevenckngaa
    stevenckngaa committed Sep 15, 2021
    Configuration menu
    Copy the full SHA
    9e43cb9 View commit details
    Browse the repository at this point in the history

  3. Merge branch 'master' into ckng/db_encryption

    @stevenckngaa
    stevenckngaa committed Sep 15, 2021
    Configuration menu
    Copy the full SHA
    b0d3388 View commit details
    Browse the repository at this point in the history

  4. Apply spotless

    @stevenckngaa
    stevenckngaa committed Sep 15, 2021
    Configuration menu
    Copy the full SHA
    75a5006 View commit details
    Browse the repository at this point in the history

Commits on Sep 20, 2021

  1. Allow database encryption on Android 6.0 or above 

    Also
1. Keep minSdk to 21
2. Add interface for key storage operations
3. Implement a KeyStore backed by EncryptedSharedPreferences
4. Generate key with vary length ranging 16 to 31 bytes
5. Add unit tests
    @stevenckngaa
    stevenckngaa committed Sep 20, 2021
    Configuration menu
    Copy the full SHA
    5b03a8a View commit details
    Browse the repository at this point in the history

Commits on Sep 30, 2021

  1. Merge branch 'master' into ckng/db_encryption

    @stevenckngaa
    stevenckngaa committed Sep 30, 2021
    Configuration menu
    Copy the full SHA
    4d1a969 View commit details
    Browse the repository at this point in the history

  2. Use a HMAC 256 signed empty string as the database key

    @stevenckngaa
    stevenckngaa committed Sep 30, 2021
    Configuration menu
    Copy the full SHA
    b44b9c8 View commit details
    Browse the repository at this point in the history

  3. Enable database encryption in the reference app by default

    @stevenckngaa
    stevenckngaa committed Sep 30, 2021
    Configuration menu
    Copy the full SHA
    a9c1b94 View commit details
    Browse the repository at this point in the history

Commits on Oct 8, 2021

  1. Load database key in RoomDatabase background thread 

    1. Load database key in RoomDatabase background thread
2. Add more tests
    @stevenckngaa
    stevenckngaa committed Oct 8, 2021
    Configuration menu
    Copy the full SHA
    ce43106 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'master' into ckng/db_encryption

    @stevenckngaa
    stevenckngaa committed Oct 8, 2021
    Configuration menu
    Copy the full SHA
    98fa50d View commit details
    Browse the repository at this point in the history

Commits on Oct 18, 2021

  1. Add retry when Android keystore is busy 

    Also
1. Rename StorageKeyProvider to DatabaseEncryptionKeyProvider and make it private to database/impl package so that it is only used in FHIR database
2. better handle database corruption at open
    @stevenckngaa
    stevenckngaa committed Oct 18, 2021
    Configuration menu
    Copy the full SHA
    2746cc3 View commit details
    Browse the repository at this point in the history

  2. Reenable some tests

    @stevenckngaa
    stevenckngaa committed Oct 18, 2021
    Configuration menu
    Copy the full SHA
    a941caa View commit details
    Browse the repository at this point in the history

Commits on Oct 27, 2021

  1. Merge branch 'master' into ckng/db_encryption

    @stevenckngaa
    stevenckngaa committed Oct 27, 2021
    Configuration menu
    Copy the full SHA
    d5ab15f View commit details
    Browse the repository at this point in the history

  2. Remove outdated TODO

    @stevenckngaa
    stevenckngaa committed Oct 27, 2021
    Configuration menu
    Copy the full SHA
    bf9105c View commit details
    Browse the repository at this point in the history

Commits on Oct 29, 2021

  1. Use a different database name for unencrypted and encrypted database

    @stevenckngaa
    stevenckngaa committed Oct 29, 2021
    Configuration menu
    Copy the full SHA
    7335ec8 View commit details
    Browse the repository at this point in the history

  2. Update documentation

    @stevenckngaa
    stevenckngaa committed Oct 29, 2021
    Configuration menu
    Copy the full SHA
    956f019 View commit details
    Browse the repository at this point in the history

Commits on Nov 5, 2021

  1. Merge branch 'master' into ckng/db_encryption

    @stevenckngaa
    stevenckngaa committed Nov 5, 2021
    Configuration menu
    Copy the full SHA
    68e0e52 View commit details
    Browse the repository at this point in the history

  2. Move keystore timeout retry to SQLCipherSupportHelper

    @stevenckngaa
    stevenckngaa committed Nov 5, 2021
    Configuration menu
    Copy the full SHA
    d7f7dc1 View commit details
    Browse the repository at this point in the history

  3. Update kdoc

    @stevenckngaa
    stevenckngaa committed Nov 5, 2021
    Configuration menu
    Copy the full SHA
    e4d009b View commit details
    Browse the repository at this point in the history

Commits on Nov 12, 2021

  1. Update documentation

    @stevenckngaa
    stevenckngaa committed Nov 12, 2021
    Configuration menu
    Copy the full SHA
    6137ba6 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'master' into ckng/db_encryption

    @stevenckngaa
    stevenckngaa committed Nov 12, 2021
    Configuration menu
    Copy the full SHA
    386808a View commit details
    Browse the repository at this point in the history

  3. Apply spotless

    @stevenckngaa
    stevenckngaa committed Nov 12, 2021
    Configuration menu
    Copy the full SHA
    d54b91c View commit details
    Browse the repository at this point in the history

Commits on Nov 15, 2021

  1. Allow SQLCipher license because it's effectively BSD-3

    @stevenckngaa
    stevenckngaa committed Nov 15, 2021
    Configuration menu
    Copy the full SHA
    73441e5 View commit details
    Browse the repository at this point in the history

  2. Fix SQLCipher license allowed dependency

    @stevenckngaa
    stevenckngaa committed Nov 15, 2021
    Configuration menu
    Copy the full SHA
    00b2b9e View commit details
    Browse the repository at this point in the history

Commits on Nov 26, 2021

  1. Merge branch 'master' into ckng/db_encryption

    @stevenckngaa
    stevenckngaa committed Nov 26, 2021
    Configuration menu
    Copy the full SHA
    b00b47c View commit details
    Browse the repository at this point in the history

  2. Address Jing's comments

    @stevenckngaa
    stevenckngaa committed Nov 26, 2021
    Configuration menu
    Copy the full SHA
    650ac9a View commit details
    Browse the repository at this point in the history