Description

As part of the new KeyringController API, there's a need to improve the current encryption logic for the vault.

Today the user's password directly encrypts the vault, there's an improvement opportunity where the KeyringController can use an encryption key to encrypt the vault. Next is presented the specific steps for two use cases,

Use Case: Lock the vault

1. Create or get encryption-key
2. Encrypt vault with encryption-key
3. Encrypt encryption-key with password

Use Case: Unlock the vault

1. Decrypt encryption-key with password
2. Decrypt vault with encryption-key

Acceptance Criteria

• The encryption key must have a defined use policy
• All new code must have tests
• All new code must be document

Reference

• API Re-design Proposal