Encryption Service

Handles all client-side cryptographic operations for assignment dispatch using asymmetric encryption (ECDH key pairs). The service generates or retrieves the peer mentor's public key from the backend, encrypts sensitive fields (name, address, epikrise) before transmission, and decrypts received assignments using the device's private key stored in the secure enclave. The backend never sees plaintext sensitive data.

Feature: Encrypted Assignment Dispatch

encryption-service

• Generate and manage asymmetric key pairs (ECDH) per user, storing private keys in device secure enclave (Keychain/Keystore)
• Encrypt assignment payload client-side before dispatch using recipient's public key
• Decrypt received assignment payloads using local private key from secure enclave
• Retrieve and cache peer mentor public keys from the backend key registry
• Validate encryption integrity and handle key rotation scenarios