actualNoteContentPart: ## Initialization Vector
  A random value used when encrypting data with an encryption key to ensure that two matching plain-text inputs do not produce the same encrypted output. This value is not considered a secret, and is typically stored next to the encrypted output. Initialization Vectors used for AES-256-CBC encryption are 128-bit (16 bytes), while those used for AES-256-GCM are 96-bit (12 bytes).
  
  ## Note Key
  A 256-bit random value generated when a note is created. This value is used with a per-note Initialization Vector to encrypt the content of the note with AES-256-CBC.
  
  ## Standard Key
  A 256-bit random value generated when a user account is created. This key is used with a per-note Initialization Vector to encrypt a Note Key with AES-256-CBC.
  
  ## Standard Note Key
  A Note Key that has been encrypted with AES-256-CBC using the user's Standard Key and a randomly generated 128-bit Initialization Vector.
  
  ## Vault Key
  A 256-bit value that is derived from the Vault Password and Vault Key Salt using PBKDF2. This value is used with a per-note Initialization Vector to encrypt a Note Key with AES-256-CBC.
  
  ## Vault Key Challenge
  A randomly generated 128-bit value used by the client to prove that they are using the same Vault Password for all Vault Notes.
  
  ## Vault Password
  A user-entered password that is never transmitted to the Amplenote servers. This is distinct from the user's login password, which is used to authenticate their identity when logging in.
  
  ## Vault Key Response
  The Vault Key Challenge encrypted with AES-256-CBC using the Vault Key and a randomly generated 128-bit Initialization Vector.
  
  ## Vault Key Salt
  A 256-bit randomly generated value specific to each user's account. Combined with the user's Vault Password to produce the Vault Key.
  
  ## Vault Key Verifier
  The Vault Key Response after being hashed with BCrypt, combined with the Initialization Vector that was used when encrypting the Vault Key Challenge to produce the Vault Key Response.
  
  ## Vault Note Key
  A Note Key that has been encrypted with AES-256-CBC using the user's Vault Key and a randomly generated 128-bit Initialization Vector.
  
  ## Vault Notes
  Notes that have had their Note Key encrypted with a user's Vault Key. Some features are disabled for these notes, such as sharing and generation of public links.
processedNoteContent: ---
  title: Amplenote Security Design
  headers: ## Initialization Vector
  ---
  Initialization Vector
  A random value used when encrypting data with an encryption key to ensure that two matching plain-text inputs do not produce the same encrypted output. This value is not considered a secret, and is typically stored next to the encrypted output. Initialization Vectors used for AES-256-CBC encryption are 128-bit (16 bytes), while those used for AES-256-GCM are 96-bit (12 bytes). 
  Note Key
  A 256-bit random value generated when a note is created. This value is used with a per-note Initialization Vector to encrypt the content of the note with AES-256-CBC. 
  Standard Key
  A 256-bit random value generated when a user account is created. This key is used with a per-note Initialization Vector to encrypt a Note Key with AES-256-CBC. 
  Standard Note Key
  A Note Key that has been encrypted with AES-256-CBC using the user's Standard Key and a randomly generated 128-bit Initialization Vector. 
  Vault Key
  A 256-bit value that is derived from the Vault Password and Vault Key Salt using PBKDF2. This value is used with a per-note Initialization Vector to encrypt a Note Key with AES-256-CBC. 
  Vault Key Challenge
  A randomly generated 128-bit value used by the client to prove that they are using the same Vault Password for all Vault Notes. 
  Vault Password
  A user-entered password that is never transmitted to the Amplenote servers. This is distinct from the user's login password, which is used to authenticate their identity when logging in. 
  Vault Key Response
  The Vault Key Challenge encrypted with AES-256-CBC using the Vault Key and a randomly generated 128-bit Initialization Vector. 
  Vault Key Salt
  A 256-bit randomly generated value specific to each user's account. Combined with the user's Vault Password to produce the Vault Key. 
  Vault Key Verifier
  The Vault Key Response after being hashed with BCrypt, combined with the Initialization Vector that was used when encrypting the Vault Key Challenge to produce the Vault Key Response. 
  Vault Note Key
  A Note Key that has been encrypted with AES-256-CBC using the user's Vault Key and a randomly generated 128-bit Initialization Vector. 
  Vault Notes
  Notes that have had their Note Key encrypted with a user's Vault Key. Some features are disabled for these notes, such as sharing and generation of public links.
noteTitle: Amplenote Security Design