5 ms·
im not the dev but what you're wanting is completely unreasonable. No note application does this and this would slow down the application without having any add
by hruzgar 3y ago
im not the dev but what you're wanting is completely unreasonable. No note application does this and this would slow down the application without having any additional benefits
- orthecreedence 3y ago> No note application does this Yes, the app Turtl (https://turtlapp.com https://turtlapp.com) does do this and it's not slow at all really. It only decrypts data upon viewing, and immediately re-encrypts when saving data. So this is actually entirely reasonable and entirely doable. The benefits are that malicious applications can't read data just sitting on the hard drive, which removes an entire class of attacks. An encrypted hd doesn't help you when it's unlocked.
- junipertea 3y agoHow would you search through thousands of notes? Decrypt them all in memory, search and encrypt them again? How does this scale with attachments?
- apantel 3y agoI have a private note app that I wrote for personal notes to keep them off the cloud. This is the one problem I don’t know how to go about solving for tens of thousands of notes. If anyone has any solutions, please share.
- cyanydeez 3y agois it possible you create a vector index on the open documents and that index basically has searchable value but doesn't leak anything vital? if it were just English you were searching for, then it wouldn't need encryption.
- rudasn 3y agoOne simple way to get around this is to use some sort of labelling system for your notes. Then you can hash the labels and keep an index of the hash. You can also symmetrically encrypt the hash, or slugify it first. The index can be a file, or many, that you load in memory and keep updated / synced on changes. You can then do label-based searches on your notes by first hashing the input string and searching for an exact match in the index. For something like full text search on encrypted data, I guess you'd need to use a database that already does that.
- orthecreedence 3y agoYeah, decrypt them all on startup and index them in-memory via SQLite. Regarding attachments, good question. Turtl doesn't index files.
- jitl 3y agoSeems fine to encrypt a SQLite database with all the contents
- mehh 3y agoAre your notes really that interesting? I’ve written software that does this sort of thing commercially, if your materials are that sensitive you’d be using one of those packages. I suspect this is just a dev with a fetish for obsessing over security. Like putting an expensive lock on a cheap bike!
- shwouchk 3y agoFWIW emacs org mode, arguably one of the best note taking applications, supports gpg encrypted notes out of the box.