Skip to content

Commit 375e4da

Browse files
authored
Update Keycard_API.md
1 parent f6130e1 commit 375e4da

File tree

1 file changed

+19
-0
lines changed

1 file changed

+19
-0
lines changed

Docs/Keycard_API.md

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,25 @@ Understanding Keycard Capabilities:
2929
>So the smart card only "accelerates" the private key operation. I put that between quotes as in general a mainstream CPU will be much faster than the speed of the cryptographic co-processor and the communication overhead provided by the card. The AES operations are performed off-card, and they bear the brunt of the work for any files above, say, a few KiB.
3030
3131

32+
## Note from Satunix. Data flow of symmetrically encrypting and decrypting data using JAVA Keycard
33+
34+
1. Encryption:
35+
- User enters passphrase
36+
- Sign passphrase with keycard
37+
- Unique key is generated
38+
- Key used as string data and input into gpg
39+
- Remove any pointers, process logs, or files required for the data flow to prevent lifting or malware extraction.
40+
- gpg encrypts the data using that unique string
41+
- encrypted file.gpg is passed off to IPFS.
42+
43+
2. Decryption:
44+
- IPFS retrieves file via CID
45+
- Enter passphrase prompt, user enters passphrase
46+
- Sign passphrase with keycard
47+
- Unique key is generated
48+
- Key used as string to decrypt the file
49+
- Remove any pointers, process logs, or files with sensitive information.
50+
- encrypted <file.gpg> becomes <file>
3251

3352
## Keycard Implementation for Encryption and Decryption
3453

0 commit comments

Comments
 (0)