1784966 - Encrypt blob files under idb/*.files directory with a separate cipher key

Status: RESOLVED FIXED

(Firefox :: Private Browsing, enhancement, P2)

Description

[Harveer Singh]

In order to support IndexedDB in Private Browsing mode; we need to ensure that any data touching disk is encrypted. We encrypt IndexedDB data under *.files and .sqlite using AEAD (Authenticated Encryption with Associated Data) mechanism. We generate a separate IV (Initialization Vector) to encrypt every file under *.files directory. Even these files are encrypted with different IVs; they all use the same cipher key. It is however even better if all these files could use a separate key.

Comment 1

[Harveer Singh]

Attachment: Screenshot on 2022-08-15 at 19:56:58.png

Comment 2

[Harveer Singh]

Attachment: Encryption of IndexedDB files in Private Browsing mode.pdf

Comment 3

[Harveer Singh]

For more detailed explanation, look at the attached pdf file.

Comment 4

[Harveer Singh]

Attachment: Bug 1784966: Encrypt IDB files and data in PBM, r=#dom-storage-reviewers

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/a266f691a68c
Encrypt IDB files and data in PBM, r=dom-storage-reviewers,jari,webdriver-reviewers,whimboo

Comment 6

[Norisz Fay [:noriszfay]]

Backed out for causing IDB Encryption related marionette failures

Backout link

Push with failures

Failure log

Comment 7

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/2516c6475047
Encrypt IDB files and data in PBM, r=dom-storage-reviewers,jari,webdriver-reviewers,whimboo

Comment 8

[Noemi Erli[:noemi_erli]]

https://hg.mozilla.org/mozilla-central/rev/2516c6475047

Comment 9

[Harveer Singh]

Fix for the above regression was pushed on Friday.