Encryption
Only the system's own cryptography.
noapps uses the cryptography that comes with the phone's operating system, with standard algorithms. It uses no algorithms of its own and nothing non-standard.
What is encrypted
- Guarded layers. What sits on a guarded layer is sealed with a key made from a sentence only you know.
- The Vault. What you type there, and the documents you attach, are sealed on the phone.
- Your backup. The backup file is sealed with a sentence of your own.
- Letters. Each letter is sealed so only the recipient's phone can open it.
We hold no key and never see a sentence. That is why nobody, including us, can open what you sealed, or recover a lost sentence.
Which cryptography
On iPhone, noapps uses Apple's CryptoKit and CommonCrypto. On Android, it uses the system's own javax.crypto. These are the libraries the operating system provides; noapps does not bring its own.
AES-256-GCMseals contentPBKDF2-HMAC-SHA256turns a sentence into a keyHKDF-SHA256derives keys from keysECDH on P-256lets two phones agree on a key, for LettersECDSA on P-256signs a letter, so the recipient knows who sealed itNo own or non-standard algorithms are used.
Mass market software
noapps is mass market software, offered to anyone in the App Store, and later on Google Play. Its encryption protects a person's own content on their own phone, and letters between two people who connected in person.
More
How data moves, or does not, is in the privacy policy. Questions: info@secure-standards.com.