展示HN:Krypter – 简单的离线消息和文件加密移动应用程序
大家好,这是我几个月来一直在开发的一款个人隐私应用。
这个应用的理念是提供一种安全的离线方式,用于在您的设备上加密消息和数据,采用HPKE和多种加密密钥类型(包括与安全隔离区绑定的密钥),以保护传输或静态数据。也就是说,可以加密并选择性签名,通过任何方式发送,只有指定的接收者(或您自己)能够阅读。消息可以作为深度链接共享,以便一键解密,并自动快速探测密钥。文件也是如此,但可以从任何地方导入。
没有权限请求,没有分析数据,没有账户,没有广告,没有订阅,绝对零在线请求。不需要“自己制作加密”的无聊功能。所有功能都使用iOS自带的CryptoKit,因此应用体积非常小。
认证模式除了支持签名外,还支持密码。紧急PIN码可以清除应用中的所有密钥。软件密钥可以安全备份。提供完全的合理否认。
例如,您可以通过任何您喜欢的方式传输消息。如果不信任流行的消息应用或电子邮件服务,您可以将其作为额外的安全保护方式。没有元数据,没有隐藏标记。只有封装的密钥和密文,没有标记显示两者的界限。
该应用不会存储您如何使用它的信息,也不会记录您加密的文件或文本。您还可以使用自己的密钥加密内容,这样您就可以将其存储在任何地方,而不必担心其他人会读取(在这种情况下,强制要求签名,以便其他人无法伪装成您为自己加密的文件)。文件名包含在密文中,因此在成功解密后可以保留。
我确实有一个与之完全兼容的安卓应用原型,但由于安卓的不同用户界面理念,目前仍在开发中。
<a href="https://apps.apple.com/us/app/krypterapp/id6757750471">https://apps.apple.com/us/app/krypterapp/id6757750471</a>
在许多方面,它确实类似于老牌的GPG,但以更轻量的形式呈现,并且没有密钥目录。
任何反馈都非常欢迎,这样我可以改进它,为大家提供更好的工具。
查看原文
Hi guys, here's a personal privacy app that I've been doing for a few months now.<p>The idea is to have a secure offline way of encrypting messages and data on your device using HPKE and a selection of encryption key types, including Secure Enclave bound ones, to protect the data in transit or at rest. As in, encrypt and optionally sign, send by any means, and only have your designated recipient (or yourself) read it. Messages can be shared as deep links for one click decryption with automated quick key probing. Files - same, but via import from anywhere.<p>No permission requests, no analytics, no accounts, no ads, no subscriptions, absolutely zero online requests. No "make your own crypto" silly things. Everything is using the iOS bundled CryptoKit. Hence the tiny size of it.<p>Authenticated mode also supports passwords in addition to signatures. Panic PIN wipes all the keys from the app. Software keys can be securely backed up. Full plausible deniability.<p>For example, a message can be transmitted by any means you prefer. Don't trust a popular messenger or email service? You can use this as an additional sturdy way of protecting it in advance. No metadata, no hidden flags. Just the encapsulated key + ciphertext with no marker of where one ends, and the other one - begins.<p>The app does not store any info about how you use it, what files or texts you encrypt. You can also encrypt stuff with your own key so you can store it anywhere without having to worry about someone else reading it (in that case signature is enforced so nobody else can make it look like it is a file you encrypted for yourself). File name is included in the ciphertext so it is preserved for once it is successfully decrypted.<p>I do have an android app prototype with full compatibility, but that is WIP due to android's different UI philosophy.<p><a href="https://apps.apple.com/us/app/krypterapp/id6757750471">https://apps.apple.com/us/app/krypterapp/id6757750471</a><p>It does in many ways resemble good old GPG, but in a more lightweight form and without key directories.<p>Any feedback is appreciated so I can improve it and make an even better tool for everyone.