如何保护 cordova 中的 localstorage 和 websql 数据 - ionic 应用程序

Question

存储在本地存储或 WebSql 数据库中的数据不受保护。 我们可以直接看到WebSql和local-storage的所有数据，因为它们是纯文本存储的。

有什么方法可以保护数据吗？

Answer 1

是的，您可以 encrypt/decrypt 您的数据使用 AES 或其他算法之类的东西。也许你可以尝试实现 https://github.com/digitalbazaar/forge#md5

// generate a random key and IV
// Note: a key size of 16 bytes will use AES-128, 24 => AES-192, 32 => AES-256
var key = forge.random.getBytesSync(16);
var iv = forge.random.getBytesSync(16);

/* alternatively, generate a password-based 16-byte key
var salt = forge.random.getBytesSync(128);
var key = forge.pkcs5.pbkdf2('password', salt, numIterations, 16);
*/

// encrypt some bytes using CBC mode
// (other modes include: CFB, OFB, CTR, and GCM)
var cipher = forge.cipher.createCipher('AES-CBC', key);
cipher.start({iv: iv});
cipher.update(forge.util.createBuffer(someBytes));
cipher.finish();
var encrypted = cipher.output;
// outputs encrypted hex
console.log(encrypted.toHex());

// decrypt some bytes using CBC mode
// (other modes include: CFB, OFB, CTR, and GCM)
var decipher = forge.cipher.createDecipher('AES-CBC', key);
decipher.start({iv: iv});
decipher.update(encrypted);
decipher.finish();
// outputs decrypted hex
console.log(decipher.output.toHex());