rspl_secure_vault 0.0.3
rspl_secure_vault: ^0.0.3 copied to clipboard
Secure Flutter plugin for storing sensitive data with hardware-backed encryption (iOS Secure Enclave, Android Keystore).
Changelog #
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
0.0.3 #
0.0.2 #
0.0.1 #
Added #
- Initial release of RSPL Secure Vault
- Envelope encryption with unique DEK (Data Encryption Key) per operation
- Hardware-backed key storage:
- iOS: Secure Enclave + Keychain
- Android: Android Keystore with StrongBox support (when available)
- AES-256-GCM encryption for all stored data
- ECDH P-256 key agreement for secure key derivation
- HKDF-SHA256 for key derivation function
- Simple, secure-by-default API:
store(key, value)- Encrypt and store dataretrieve(key)- Retrieve and decrypt dataremove(key)- Remove specific key-value pairclear()- Remove all stored datacontainsKey(key)- Check if key exists
- Internal security audit (62/62 checks passed)
- 100% Dart test coverage
Security #
- Cryptographically secure random number generators for all encryption
- Per-operation unique nonces prevent nonce reuse attacks
- GCM authentication tags (128-bit) ensure data integrity
- Master keys never leave hardware security module
- Debug logging gated behind
kDebugMode(Dart) and#if DEBUG(native) - No sensitive data in error messages or logs
Documentation #
- Comprehensive README with quick start guide
- Common use cases (auth tokens, API keys)
- Error handling guide
- FAQ section
- Security Audit report (SECURITY_AUDIT.md)
- Architecture diagrams