Database Encryption Architecture

User Password

Random Salt (32 bytes)

PBKDF2-SHA256

600,000 iterations

256-bit AES Key

Key Check Value

(AES-GCM encrypted)

IndexedDB

(Browser Storage)

SQLite3MultipleCiphers

(WASM)

SQLite Database

Fully Encrypted at Rest

Secure Buffer Zeroing

User Password

Random Salt (32 bytes)

PBKDF2-SHA256

600,000 iterations

256-bit AES Key

Key Check Value

(AES-GCM encrypted)

File System

(App Data)

ChaCha20

(better-sqlite3-multiple-ciphers)

SQLite Database

Fully Encrypted at Rest

Secure Buffer Zeroing

User Password

Random Salt (32 bytes)

PBKDF2-SHA256

600,000 iterations

256-bit AES Key

Key Check Value

(AES-GCM encrypted)

IndexedDB

(WebView Storage)

SQLCipher

(Native iOS)

SQLite Database

Fully Encrypted at Rest

Secure Buffer Zeroing

User Password

Random Salt (32 bytes)

PBKDF2-SHA256

600,000 iterations

256-bit AES Key

Key Check Value

(AES-GCM encrypted)

IndexedDB

(WebView Storage)

SQLCipher

(Native Android)

SQLite Database

Fully Encrypted at Rest

Secure Buffer Zeroing