Unmatched Data Security in Medfai

Medfai takes data security seriously, employing robust encryption methods to safeguard user information:

Advanced Encryption Standard (AES): Medfai uses AES in Cipher Block Chaining (CBC) mode, one of the most secure encryption methods available, ensuring end-to-end encryption of all data.

Strong Key Generation: For each session, Medfai generates a secure, random 32-byte key encoded in Base64. This approach corresponds to AES-256 encryption, one of the strongest encryption standards.

Initialization Vector (IV) Usage: A unique 16-byte IV is used for each user’s data encryption, further enhancing security. These IVs are generated using a secure random number generator and are also encoded in Base64.

Client-Side Encryption Process: User data, which includes both personal and health records, is encrypted on the client-side. This means the data is already encrypted before it is stored or transmitted, and it remains encrypted within the database. Crucially, decryption does not occur server-side, ensuring data is unreadable even if the database is compromised.

Secure Storage of Encryption Keys: The app uses Flutter Secure Storage, a secure storage library for Flutter, to handle the encryption keys and IVs. This library adds an additional layer of security by ensuring that sensitive information like keys is securely stored on the device.