Construct 3 r340

You're viewing a single comment in a conversation. View all the comments
  • 3 Comments

  • Order by
  • Encryption is finally built-in, cool! I have some questions. What types of encryptions are supported, and how are secrets kept? I used the Forge JS plugin before, and dealing with secrets was hard (I was also inexperienced).

      • [-] [+]
      • 5
      • Ashley's avatar
      • Ashley
      • Construct Team Founder
      • 5 points
      • (1 child)

      Currently the Cryptography plugin uses password-based AES-GCM encryption. It's possible other alternative encryption algorithms could be added in future through.

      • Thanks. Regarding the 2nd half of my question about the secrets, when I was using AES-CBC in the Forge plugin, I had some trouble dealing with them safely. In your official release, are they in the Js code produced by the application? If so, can't rely on it too much for security? Can we "pair it up" with a standalone secret management service? I assume you thought about it, which is why I ask :)