joplin/readme/dev/spec/server_sharing_e2ee.md

Sharing a notebook with E2EE enabled

• When sharing the notebook, a key (NOTEBOOK_KEY) is automatically generated and encrypted with the sender master password.
  • That key ID is then associated with the notebook
• When adding a recipient, the key is decrypted using the sender master password, and reencrypted using the recipient public key
  • That encrypted key is then attached to the share_user object (the invitation)
• When the recipient receives the invitation, the key is retrieved from it, then decrypted using the private key, and reencrypted using the recipient master password.

Once the key exchange is done, each user has their own copy of NOTEBOOK_KEY encrypted with their own master password. Public/Private Keys are only used to transfer NOTEBOOK_KEY.

Whenever any item within the notebook is encrypted, it is done with NOTEBOOK_KEY.