Encryption Service

Implements asymmetric end-to-end encryption using the peer mentor's public/private keypair, with the private key stored exclusively in the device secure enclave via flutter_secure_storage. Encrypts content with the recipient's public key on the backend before storage; decryption occurs on-device only - plaintext is never persisted or transmitted.

Feature: Encrypted Assignment Dispatch

encryption-service

• Generate keypair on device first launch and store private key in flutter_secure_storage
• Upload and cache the peer mentor's public key to the backend
• Encrypt assignment content with recipient public key before database write
• Decrypt assignment content on-device using the private key from secure enclave
• Ensure plaintext is never written to disk or included in any API response