Encrypt videos in a foreground service

Author: Wavesonics

app/src/main/AndroidManifest.xml

@@ -12,6 +12,8 @@
     <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION"/>
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
     <uses-permission android:name="android.permission.VIBRATE"/>
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE"/>
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC"/>
 
 	<!-- Prevent dependencies from adding these permissions -->
 	<uses-permission android:name="android.permission.INTERNET" tools:node="remove"/>
@@ -74,9 +76,18 @@
                 android:name=".auth.SessionService"
                 android:exported="false"/>
 
+        <service
+                android:name=".encryption.VideoEncryptionService"
+                android:exported="false"
+                android:foregroundServiceType="dataSync"/>
+
         <receiver
                 android:name=".import.ImportCancelReceiver"
                 android:exported="false"/>
+
+        <receiver
+                android:name=".encryption.VideoEncryptionCancelReceiver"
+                android:exported="false"/>
     </application>
 
 </manifest>

app/src/main/kotlin/com/darkrockstudios/app/securecamera/camera/CameraState.kt

@@ -12,13 +12,11 @@ import androidx.compose.ui.unit.IntSize
 import androidx.core.content.ContextCompat
 import androidx.lifecycle.LifecycleOwner
 import androidx.lifecycle.coroutineScope
+import com.darkrockstudios.app.securecamera.encryption.VideoEncryptionService
 import com.darkrockstudios.app.securecamera.obfuscation.FacialDetection
 import com.darkrockstudios.app.securecamera.preferences.AppSettingsDataSource
-import com.darkrockstudios.app.securecamera.security.schemes.EncryptionScheme
 import com.darkrockstudios.app.securecamera.security.streaming.SecvFileFormat
-import com.darkrockstudios.app.securecamera.security.streaming.VideoEncryptionHelper
 import kotlinx.coroutines.*
-import kotlinx.coroutines.flow.collectLatest
 import org.koin.core.component.KoinComponent
 import org.koin.core.component.inject
 import timber.log.Timber
@@ -47,10 +45,8 @@ class CameraState internal constructor(
 	private val clock: Clock by inject()
 	private val facialDetection: FacialDetection by inject()
 	private val preferences: AppSettingsDataSource by inject()
-	private val encryptionScheme: EncryptionScheme by inject()
 
 	private var faceAnalyzer: FacialDetectionAnalyzer? = null
-	private var videoEncryptionHelper: VideoEncryptionHelper? = null
 	private val cameraExecutor: ExecutorService = Executors.newSingleThreadExecutor()
 	private val analysisExecutor: ExecutorService = Executors.newSingleThreadExecutor()
 	private val analysisScope: CoroutineScope = CoroutineScope(SupervisorJob() + Dispatchers.Default)
@@ -98,66 +94,13 @@ class CameraState internal constructor(
 	var recordingDurationMs by mutableLongStateOf(0L)
 		private set
 
-	var isEncryptingVideo by mutableStateOf(false)
-		private set
-
-	var encryptionProgress by mutableFloatStateOf(0f)
-		private set
-
 	private var activeRecording: Recording? = null
 	private var videoCapture: VideoCapture<Recorder>? = null
 	private var pendingTempFile: File? = null
 	private var pendingOutputFile: File? = null
 
 	init {
 		observePreferences()
-		initializeEncryptionHelper()
-	}
-
-	private fun initializeEncryptionHelper() {
-		val streamingScheme = encryptionScheme.getStreamingCapability()
-		if (streamingScheme != null) {
-			videoEncryptionHelper = VideoEncryptionHelper(streamingScheme)
-			observeEncryptionProgress()
-		} else {
-			Timber.w("Streaming encryption not available")
-		}
-	}
-
-	private fun observeEncryptionProgress() {
-		lifecycleOwner.lifecycle.coroutineScope.launch {
-			videoEncryptionHelper?.encryptionProgress?.collectLatest { progress ->
-				when (progress) {
-					is VideoEncryptionHelper.EncryptionProgress.Idle -> {
-						isEncryptingVideo = false
-						encryptionProgress = 0f
-					}
-
-					is VideoEncryptionHelper.EncryptionProgress.Starting -> {
-						isEncryptingVideo = true
-						encryptionProgress = 0f
-					}
-
-					is VideoEncryptionHelper.EncryptionProgress.InProgress -> {
-						isEncryptingVideo = true
-						encryptionProgress = progress.progress
-					}
-
-					is VideoEncryptionHelper.EncryptionProgress.Completed -> {
-						isEncryptingVideo = false
-						encryptionProgress = 0f
-						videoEncryptionHelper?.resetProgress()
-					}
-
-					is VideoEncryptionHelper.EncryptionProgress.Error -> {
-						isEncryptingVideo = false
-						encryptionProgress = 0f
-						Timber.e("Encryption error: ${progress.message}")
-						videoEncryptionHelper?.resetProgress()
-					}
-				}
-			}
-		}
 	}
 
 	private fun observePreferences() {
@@ -323,8 +266,8 @@ class CameraState internal constructor(
 			return null
 		}
 
-		if (isRecording || isEncryptingVideo) {
-			Timber.w("Recording or encryption already in progress")
+		if (isRecording) {
+			Timber.w("Recording already in progress")
 			return null
 		}
 
@@ -375,11 +318,9 @@ class CameraState internal constructor(
 							pendingTempFile = null
 							pendingOutputFile = null
 						} else {
-							Timber.i("Recording complete, starting encryption...")
-							// Start encryption in background
-							lifecycleOwner.lifecycle.coroutineScope.launch {
-								encryptRecordedVideo(tempFile, outputFile)
-							}
+							Timber.i("Recording complete, enqueueing encryption...")
+							// Enqueue encryption via ForegroundService
+							enqueueVideoEncryption(context, tempFile, outputFile)
 						}
 					}
 				}
@@ -389,28 +330,12 @@ class CameraState internal constructor(
 	}
 
 	/**
-	 * Encrypts the recorded video from temp file to final encrypted file.
+	 * Enqueues the recorded video for encryption via the ForegroundService.
+	 * The service handles encryption in the background with progress notifications.
 	 */
-	private suspend fun encryptRecordedVideo(tempFile: File, outputFile: File) {
-		val helper = videoEncryptionHelper
-		if (helper == null) {
-			Timber.e("Video encryption helper not available")
-			// Fall back to keeping the unencrypted file (rename to .mp4)
-			val fallbackFile = File(outputFile.parent, outputFile.nameWithoutExtension + ".mp4")
-			tempFile.renameTo(fallbackFile)
-			return
-		}
-
-		val success = helper.encryptVideoFile(tempFile, outputFile)
-		if (success) {
-			Timber.i("Video encrypted successfully: ${outputFile.absolutePath}")
-		} else {
-			Timber.e("Video encryption failed")
-			// Keep the temp file as fallback (rename to .mp4)
-			val fallbackFile = File(outputFile.parent, outputFile.nameWithoutExtension + ".mp4")
-			tempFile.renameTo(fallbackFile)
-		}
-
+	private fun enqueueVideoEncryption(context: Context, tempFile: File, outputFile: File) {
+		Timber.i("Enqueueing video encryption: ${tempFile.name} -> ${outputFile.name}")
+		VideoEncryptionService.enqueueEncryption(context, tempFile, outputFile)
 		pendingTempFile = null
 		pendingOutputFile = null
 	}

app/src/main/kotlin/com/darkrockstudios/app/securecamera/encryption/VideoEncryptionCancelReceiver.kt

@@ -0,0 +1,31 @@
+package com.darkrockstudios.app.securecamera.encryption
+
+import android.content.BroadcastReceiver
+import android.content.Context
+import android.content.Intent
+import timber.log.Timber
+
+/**
+ * BroadcastReceiver for handling cancel actions from the encryption notification.
+ */
+class VideoEncryptionCancelReceiver : BroadcastReceiver() {
+
+	companion object {
+		const val ACTION_CANCEL_ENCRYPTION = "com.darkrockstudios.app.securecamera.action.CANCEL_ENCRYPTION"
+		const val ACTION_CANCEL_ALL = "com.darkrockstudios.app.securecamera.action.CANCEL_ALL_ENCRYPTION"
+	}
+
+	override fun onReceive(context: Context, intent: Intent) {
+		when (intent.action) {
+			ACTION_CANCEL_ENCRYPTION -> {
+				Timber.d("Cancel current encryption job requested")
+				VideoEncryptionService.cancelCurrentJob(context)
+			}
+
+			ACTION_CANCEL_ALL -> {
+				Timber.d("Cancel all encryption jobs requested")
+				VideoEncryptionService.cancelAllJobs(context)
+			}
+		}
+	}
+}

app/src/main/kotlin/com/darkrockstudios/app/securecamera/encryption/VideoEncryptionJob.kt

@@ -0,0 +1,25 @@
+package com.darkrockstudios.app.securecamera.encryption
+
+import java.io.File
+
+/**
+ * Represents a video encryption job to be processed by the VideoEncryptionService.
+ */
+data class VideoEncryptionJob(
+	val jobId: String,
+	val tempFile: File,
+	val outputFile: File,
+	val createdAt: Long,
+	val status: JobStatus = JobStatus.Pending
+)
+
+/**
+ * Represents the current status of an encryption job.
+ */
+sealed class JobStatus {
+	data object Pending : JobStatus()
+	data class InProgress(val progress: Float) : JobStatus()
+	data object Completed : JobStatus()
+	data class Error(val message: String) : JobStatus()
+	data object Cancelled : JobStatus()
+}