Kilonova v0.4.0

Kilonova 0.4.0 adds backups, payment notifications from your own server,
opt-in checks for payments while the app is closed, and more privacy on
the network.

Kilonova has not been audited. Do not keep more in it than you can afford
to lose. Stagenet and testnet are there to try it without risk.

New

• Backups. Settings, Your data, Backup saves the wallets you choose to
  one file: wallet files exactly as stored, sync caches, labels, address
  book, notes, payment requests and node settings. The file is encrypted
  with its own passphrase (at least 12 characters), separate from your
  wallet passwords. Restoring never overwrites anything; a wallet that
  already exists comes back as "Name (restored)". Your seed is still the
  backup of your funds; this one also keeps everything else.
• Checks for payments while the app is closed (Android, opt-in). Off
  until you turn it on under Settings, Background. Kilonova explains what
  it does, asks for the notification permission and for the password of
  each wallet you choose. About every 15 minutes, without opening the app
  or unlocking anything, it checks those wallets and tells you when a
  payment arrives. To do that it keeps each chosen wallet's view key on the
  phone, locked by the phone's secure hardware; the view key can see
  incoming payments but cannot spend. Your seed and spend key never leave
  the password-protected wallet file. Turning it off deletes what it kept.
• Payment notifications from your own server. The self-hosting kit can
  tell your phone the moment a payment reaches a wallet, through Tor and
  UnifiedPush (for example the ntfy app). The message says only that
  something arrived: no amount, address or transaction. Nothing goes
  through Google or anyone else's server. See tools/selfhost/README.md.
• Keep syncing in the tray (Linux and Windows). Closing the window can
  keep unlocked wallets syncing from the system tray, behind the same kind
  of consent screen. Off by default.

More private on the network

• A Tor circuit per wallet. With Tor, each wallet, and each kind of
  request within it, uses its own circuit, so nodes cannot link your
  wallets by exit address.
• Payments go out through a different node. With a proxy set, a
  signed transaction is sent through a random public node instead of the
  one you sync from, so that node does not see you send. If it does not
  answer, Kilonova uses your sync node and tells you.
• Cover lookups. Checking a transaction (payment proofs, and checking a
  light wallet server's payments against a node) asks for it among seven
  real transactions from nearby blocks, so the node cannot tell which one
  you care about. Because of that, checking a light wallet server's
  payments against a node is now on by default.

Changed

• Android's old background sync, which kept unlocked wallets running
  behind an always-on notification, is replaced by the checks above.
  Leaving the app locks your wallets again. The update turns the old
  setting off, on desktops too; turn the new one on if you want it.

Files

File	For
kilonova-*-android-arm64-v8a.apk	Most Android phones
kilonova-*-android-armeabi-v7a.apk	Older 32-bit Android phones
kilonova-*-android-x86_64.apk	Android emulators and x86 devices
kilonova_*_amd64.deb	Debian, Ubuntu and derivatives
kilonova-*-linux-x64.tar.gz	Other Linux distributions
kilonova-*-windows-x64-setup.exe	Windows installer
kilonova-*-windows-x64.zip	Windows without installing

Check downloads against SHA256SUMS. The Android APKs are signed with the
same Kilonova release key as earlier versions, so they install as an update;
its certificate's SHA-256 fingerprint is
04:C8:83:64:15:DD:E7:DC:17:D8:E0:F0:C1:17:86:0A:2A:59:3D:31:C3:DC:D4:B5:30:83:12:40:EC:46:BF:34
(apksigner verify --print-certs <apk>). The Windows files are not code-signed
yet, so Windows SmartScreen will warn before running them.

Known limits

• No hardware wallets or multisig yet.
• Checks while the app is closed are Android only; on desktops, Kilonova
  checks while it runs, including from the tray.
• Light wallet servers see your incoming payments; full sync avoids that.

Privacy policy: PRIVACY.md.

Guide: Kilonova on learn.dhivalabs.com: install steps, a beginner guide and troubleshooting.

Kilonova v0.3.0

Kilonova 0.3.0 is about resource use: the same wallet, using far less of
your network, battery, disk and memory. Nothing about what the wallet
checks has changed.

Kilonova has not been audited. Do not keep more in it than you can afford
to lose. Stagenet and testnet are there to try it without risk.

Faster, lighter sync

Measured on a full sync of a 16,000-block test chain:

	0.2.0	0.3.0
Time	5.8 s	1.2 s
Requests to the node	17,056	493
Downloaded	23.9 MiB	3.3 MiB
Written to disk	21.4 MiB	0.9 MiB
One idle minute at the tip: wakeups, disk writes	143, 1.8 MB	7, none

• Blocks arrive in one request. Most nodes leave out a piece of each
  block's data, which made the wallet ask again two or three times per
  block; now only the missing pieces are fetched, in batches. Every
  transaction is still checked against its block.
• One request at the chain tip checks for both new blocks and
  reorganizations, and transactions waiting in the pool are fetched once.
• Connections to your node or server stay open between rounds, so Tor and
  TLS connections are not set up again every 30 seconds.
• The wallet cache is saved only when something changed.
• In the background, a wallet that is caught up looks for new blocks every
  five minutes instead of every 30 seconds, and looks right away when you
  come back. Unreachable nodes are retried less and less often, up to
  every five minutes.

A lighter app

• Long histories and coin lists build only the rows on screen. A wallet
  with 2,000 transactions opens its page in about a tenth of the time and
  memory it took before.
• The wallet page reloads its data when a block arrives or a sync round
  ends, not on every progress update.
• The library that holds the Rust core is a third smaller (12.9 MB to
  8.7 MB on Linux).

Files

File	For
kilonova-*-android-arm64-v8a.apk	Most Android phones
kilonova-*-android-armeabi-v7a.apk	Older 32-bit Android phones
kilonova-*-android-x86_64.apk	Android emulators and x86 devices
kilonova_*_amd64.deb	Debian, Ubuntu and derivatives
kilonova-*-linux-x64.tar.gz	Other Linux distributions
kilonova-*-windows-x64-setup.exe	Windows installer
kilonova-*-windows-x64.zip	Windows without installing

Check downloads against SHA256SUMS. The Android APKs are signed with the
same Kilonova release key as earlier versions, so they install as an update;
its certificate's SHA-256 fingerprint is
04:C8:83:64:15:DD:E7:DC:17:D8:E0:F0:C1:17:86:0A:2A:59:3D:31:C3:DC:D4:B5:30:83:12:40:EC:46:BF:34
(apksigner verify --print-certs <apk>). The Windows files are not code-signed
yet, so Windows SmartScreen will warn before running them.

Known limits

• No hardware wallets or multisig yet.
• Background sync is Android only; desktops sync while the app is open.
• Light wallet servers see your incoming payments; full sync avoids that.

Privacy policy: PRIVACY.md.

Kilonova v0.2.0

Kilonova 0.2.0 adds features that other Monero wallets do not offer, or
offer only on desktop. The plan behind them is in
docs/ROADMAP.md.

Kilonova has not been audited. Do not keep more in it than you can afford
to lose. Stagenet and testnet are there to try it without risk.

New

• A phone as a cold wallet. Keep a wallet on a phone that stays offline.
  A watch-only wallet on another device builds transactions; the offline
  phone checks the payments and signs them; every message moves as QR codes.
  The offline phone shows what the transaction itself pays, not what it was
  told.
• Pair with your own server. The self-hosting kit in tools/selfhost
  runs a pruned node, a light wallet server and Tor, then prints one code.
  Scan it and the wallet uses both.
• Check your light wallet server. An opt-in setting confirms every
  payment the server reports against a node, and drops any it invented.
• Payment requests. Ask for an amount with a label and an expiry. Each
  request gets its own address and shows when it is paid, with a
  notification if you turned those on.
• Coin control. Freeze coins, or send from the ones you pick. Review
  warns when the coins arrived on several of your addresses, because spending
  them together links those addresses.
• A second opinion on the node. Full sync compares your node's chain with
  another node's and warns when they differ.
• Find nodes on your network, such as a node on your home server.
• Check a payment. Enter a transaction ID, its key and an address to see
  what that address received.
• Copy and paste. Copy buttons for every address, the transaction ID and
  key, the seed and a new Show keys screen. Copying the seed or a secret key
  asks first and clears the clipboard after 60 seconds. Long fields have a
  paste button.
• The seed screen now shows the restore height, so a restore scans from
  there instead of the start.

Files

File	For
kilonova-*-android-arm64-v8a.apk	Most Android phones
kilonova-*-android-armeabi-v7a.apk	Older 32-bit Android phones
kilonova-*-android-x86_64.apk	Android emulators and x86 devices
kilonova_*_amd64.deb	Debian, Ubuntu and derivatives
kilonova-*-linux-x64.tar.gz	Other Linux distributions
kilonova-*-windows-x64-setup.exe	Windows installer
kilonova-*-windows-x64.zip	Windows without installing

Check downloads against SHA256SUMS. The Android APKs are signed with the
same Kilonova release key as 0.1.0, so they install as an update; its
certificate's SHA-256 fingerprint is
04:C8:83:64:15:DD:E7:DC:17:D8:E0:F0:C1:17:86:0A:2A:59:3D:31:C3:DC:D4:B5:30:83:12:40:EC:46:BF:34
(apksigner verify --print-certs <apk>). The Windows files are not code-signed
yet, so Windows SmartScreen will warn before running them.

Known limits

• No hardware wallets or multisig yet.
• Background sync is Android only; desktops sync while the app is open.
• Light wallet servers see your incoming payments; full sync avoids that.

Privacy policy: PRIVACY.md.

Kilonova v0.1.0

First release of Kilonova, an open-source Monero wallet for Linux, Windows and
Android.

Kilonova has not been audited. Do not keep more in it than you can afford
to lose. Stagenet and testnet are there to try it without risk.

What it does

• Several wallets on mainnet, stagenet and testnet; create or restore from a
  25-word or Polyseed seed, a spend key, or as view-only.
• Full sync: scans blocks on your device from a node you choose (community
  nodes are bundled; add your own). Payments waiting in the pool show at once.
• Light wallet server sync, with your own monero-lws or a provider you trust.
  The view key is shared only after you agree for that exact server, and
  every output it reports is checked with your keys, including its amount.
• Send to several recipients or send everything, with fee priorities.
  Review shows what the signed transaction pays before the password (or
  fingerprint) publishes it.
• Receive with QR codes and amount requests; scan QR codes with the camera on
  Android or from an image on desktop.
• Address book, transaction notes and payment proofs (transaction keys that
  monero-wallet-rpc's check_tx_key accepts).
• Tor or any SOCKS5 proxy for all traffic, onion nodes, and pinned
  certificates for your own node.
• Optional, off by default: prices in your currency, payment notifications,
  and background sync on Android.

Files

File	For
kilonova-*-android-arm64-v8a.apk	Most Android phones
kilonova-*-android-armeabi-v7a.apk	Older 32-bit Android phones
kilonova-*-android-x86_64.apk	Android emulators and x86 devices
kilonova_*_amd64.deb	Debian, Ubuntu and derivatives
kilonova-*-linux-x64.tar.gz	Other Linux distributions
kilonova-*-windows-x64-setup.exe	Windows installer
kilonova-*-windows-x64.zip	Windows without installing

Check downloads against SHA256SUMS. The Android APKs are signed with the
Kilonova release key; its certificate's SHA-256 fingerprint is
04:C8:83:64:15:DD:E7:DC:17:D8:E0:F0:C1:17:86:0A:2A:59:3D:31:C3:DC:D4:B5:30:83:12:40:EC:46:BF:34
(apksigner verify --print-certs <apk>). The Windows files are not code-signed
yet, so Windows SmartScreen will warn before running them.

Known limits

• No hardware wallets or multisig yet.
• Background sync is Android only; desktops sync while the app is open.
• Light wallet servers see your incoming payments; full sync avoids that.

Privacy policy: PRIVACY.md.