End to End encrypted notes

[HarshYadav152]

Now in SaveBook notes are saved in plain text in mongodb database.
I want to someone implement a feature for all notes stored in db are end to end encrypted

[bhoomiiee]

I’d like to clarify scope:
I plan to implement client-side encryption using standard cryptographic libraries so notes are encrypted before storage and decrypted only on the client.
This will avoid custom crypto and keep the solution secure and maintainable.
Please let me know if this aligns with expectations.

[HarshYadav152]

Alright @bhoomiiee ask @vinayboss9669 for assigning this issue to you.
Also change title and description of that issue if not changes create another issue and mention this issue.

[bhoomiiee]

Hi @vinayboss9669 ,
I’m tagging you to confirm scope for this issue.
The proposal is to implement client-side encryption using standard cryptographic libraries (no custom crypto) so notes are encrypted before storage and decrypted only on the client.
This is intended to improve privacy while keeping the solution secure and maintainable.
Please let me know if this aligns with the project’s expectations, or if you’d prefer changes to the scope/title or a separate issue. Thanks!

[CHANDU32455]

Hello, I am Chandu.

I recently came across this issue and would like to contribute to resolving it. I have already submitted a Pull Request, and all checks have successfully passed. I kindly request you to review my PR at your convenience.

Additionally, if possible, I would appreciate having this contribution tracked under ECWoC26 for program evaluation purposes.

Thank you for your time and consideration.

[HarshYadav152]

@CHANDU32455 We will review your PR but next time wait for get assigned to an issue before doing any kind of work.

[HarshYadav152]

@bhoomiiee You also continue your work we will also review your PR

[bhoomiiee]

@bhoomiiee You also continue your work we will also review your PR

I’ve opened a partial PR that introduces AES-256-GCM encryption utilities and prepares the notes API for E2EE.
Next steps will wire encrypt-on-write and decrypt-on-read, followed by client-side encryption.

[VinayKumar42]

@bhoomiiee and @CHANDU32455
what is the progess.

[bhoomiiee]

Thanks for the follow-up.
Client-side encryption and decryption are implemented, with notes encrypted before leaving the browser and decrypted only on the client. The server only stores encrypted payloads and never has access to plaintext or keys.
I’m currently finalizing integration details (payload format consistency, error handling for failed decryption, and documentation of security boundaries) before pushing the next update.
I’ll post the update shortly once these are completed.