core-service/org.meshtastic.core.service/[jvm]LockdownPassphraseStoreImpl

LockdownPassphraseStoreImpl

class LockdownPassphraseStoreImpl : LockdownPassphraseStore(source)

File-backed encrypted passphrase store for JVM/Desktop.

Uses a PKCS12 KeyStore to hold an AES-256 master key and AES-256-GCM to encrypt each passphrase entry. Entries are stored as individual .enc files under $MESHTASTIC_DATA_DIR/lockdown/ (default: ~/.meshtastic/lockdown/), keyed by a sanitized device address.

The keystore password is fixed because the threat model mirrors Android's EncryptedSharedPreferences: file-system permission is the primary access control; the encryption layer protects data at rest against casual file browsing or backup leakage, not against a compromised user account.

Constructors

LockdownPassphraseStoreImpl

constructor()

Functions

clearPassphrase

open override fun clearPassphrase(deviceAddress: String)

getPassphrase

open override fun getPassphrase(deviceAddress: String): StoredPassphrase?

savePassphrase

open override fun savePassphrase(deviceAddress: String, passphrase: String, boots: Int, hours: Int, maxSessionSeconds: Int)