Secure Enterprise Document App
Publicada el 2026-08-02
Descripción de la oferta
I’m building “TrustSafe,” an offline-first mobile app that lets our staff open highly sensitive PDFs on their phones while keeping every byte protected. The Flutter scaffold is in place; what I need now is a security-minded developer to finish the heavy lifting. Your mission is to wire up end-to-end AES-256 encryption, handle seamless Google Cloud Storage sync, and enforce granular, project-team–based permissions. Each document must remain encrypted at rest in a local SQLite store, with keys derived on device and never transmitted in the clear. When connectivity returns, the encrypted blobs should sync automatically to a dedicated GCS bucket that mirrors the same project-team access rules. We only handle PDFs, so smooth rendering after on-the-fly decryption is essential. Clean, test-driven Flutter code, dependency injection for easy auditing, and concise documentation of the crypto workflow are expected. Deliverables • Complete Flutter source with modular architecture • AES-256 implementation with solid IV and key management • Secure Google Cloud Storage integration (signed URLs, least-privilege IAM) • Role-based access layer mapped to project-team IDs (API supplied) • Offline caching, conflict resolution, basic audit logging • Unit & widget tests plus a short security report outlining attack surface and mitigations Acceptance criteria: our CI suite passes, documents stay encrypted on device and in transit, only the correct project team can open a file, and cold-start time stays under five seconds on mid-range Android hardware. If you’ve delivered production Flutter apps with strong cryptography and cloud storage before, kindly share a brief code sample or reference.
Skills
Fuente original: freelancer