展示 HN：Krypter – 简单离线消息和文件加密移动应用
2 分•作者: nobodyshere•2 个月前
大家好，这是我几个月以来一直在开发的一款个人隐私应用。<p>其理念是利用 HPKE 和多种加密密钥类型（包括与 Secure Enclave 绑定的密钥）提供一种安全的离线方式来加密设备上的消息和数据，以保护传输中或静态的数据。也就是说，加密并可选签名，通过任何方式发送，只有您指定的接收者（或您自己）才能读取。消息可以作为深度链接共享，通过自动快速密钥探测实现一键解密。文件也是如此，但通过从任何地方导入。<p>无权限请求，无分析，无账户，无广告，无订阅，绝对零在线请求。没有“自己造加密”之类的愚蠢操作。所有功能都使用 iOS 内置的 CryptoKit。因此，应用体积非常小。<p>认证模式除了签名外，还支持密码。紧急 PIN 码会清除应用中的所有密钥。软件密钥可以安全备份。完全的合理否认。<p>例如，消息可以通过您喜欢的任何方式传输。不信任流行的信使或电子邮件服务？您可以使用此应用作为一种额外的、可靠的预先保护方式。无元数据，无隐藏标记。只有封装的密钥 + 密文，没有标记区分两者的起始位置。<p>该应用不存储任何关于您如何使用它、加密了哪些文件或文本的信息。您也可以使用自己的密钥加密内容，这样就可以将其存储在任何地方，而不必担心其他人阅读它（在这种情况下，签名是强制的，因此没有人可以伪装成您为自己加密的文件）。文件名包含在密文中，因此在成功解密后会得到保留。<p>我有一个功能齐全的 Android 应用原型，但由于 Android 的 UI 设计理念不同，目前仍在开发中。<p><a href="https://apps.apple.com/us/app/krypterapp/id6757750471">https://apps.apple.com/us/app/krypterapp/id6757750471</a><p>它在很多方面都类似于经典的 GPG，但形式更轻量级，且没有密钥目录。<p>欢迎任何反馈，以便我改进它，并为所有人打造一个更好的工具。
查看原文
Hi guys, here's a personal privacy app that I've been doing for a few months now.<p>The idea is to have a secure offline way of encrypting messages and data on your device using HPKE and a selection of encryption key types, including Secure Enclave bound ones, to protect the data in transit or at rest. As in, encrypt and optionally sign, send by any means, and only have your designated recipient (or yourself) read it. Messages can be shared as deep links for one click decryption with automated quick key probing. Files - same, but via import from anywhere.<p>No permission requests, no analytics, no accounts, no ads, no subscriptions, absolutely zero online requests. No "make your own crypto" silly things. Everything is using the iOS bundled CryptoKit. Hence the tiny size of it.<p>Authenticated mode also supports passwords in addition to signatures. Panic PIN wipes all the keys from the app. Software keys can be securely backed up. Full plausible deniability.<p>For example, a message can be transmitted by any means you prefer. Don't trust a popular messenger or email service? You can use this as an additional sturdy way of protecting it in advance. No metadata, no hidden flags. Just the encapsulated key + ciphertext with no marker of where one ends, and the other one - begins.<p>The app does not store any info about how you use it, what files or texts you encrypt. You can also encrypt stuff with your own key so you can store it anywhere without having to worry about someone else reading it (in that case signature is enforced so nobody else can make it look like it is a file you encrypted for yourself). File name is included in the ciphertext so it is preserved for once it is successfully decrypted.<p>I do have an android app prototype with full compatibility, but that is WIP due to android's different UI philosophy.<p><a href="https://apps.apple.com/us/app/krypterapp/id6757750471">https://apps.apple.com/us/app/krypterapp/id6757750471</a><p>It does in many ways resemble good old GPG, but in a more lightweight form and without key directories.<p>Any feedback is appreciated so I can improve it and make an even better tool for everyone.