Skip to content

v1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 31 Jul 16:20
· 11 commits to main since this release
v1.0.0
38746b2

First public release. Cross-platform, and a substantial rework of the cryptography since the
Windows-only version.

Encryption

  • Files and text are encrypted with AES-256. Earlier builds used CAST5, which has a 64-bit
    block that large files can push past its safe limit.
  • Every message carries an integrity check, and decryption now verifies it. Previously the
    check was written but never validated, so a modified file decrypted without complaint. A file
    that fails the check produces no output at all.
  • Encrypted output is written to a temporary file and only moved into place once the check passes.

Keys

  • Ed25519 keys with a Curve25519 encryption subkey, generated in milliseconds. RSA is still
    available and now defaults to 4096 bits.
  • Revocation certificates are produced when a key is created and can be saved alongside it.
    Publishing one retires a key you can no longer use. It is generated up front because making one
    later needs the private key and its passphrase, and losing those is the usual reason to need it.
  • Optional expiry dates on new keys.
  • Keys are stored per-platform: %APPDATA% on Windows, ~/Library/Application Support on macOS
    and $XDG_DATA_HOME on Linux. On macOS and Linux the key directory is 0700 and key files are
    0600.

New in this release

  • Sign and verify. Detached signatures for files, clear-signed blocks for text. The original
    file is left untouched.
  • Text mode. Encrypt, decrypt, sign and verify a block of text without going through a file.
    Pasting an encrypted or signed block selects the matching action.
  • Drag and drop files onto the window.

Interoperability

Verified against GnuPG in both directions on Windows, macOS and Linux: keys generated here import
into gpg, gpg encrypts to them, and gpg reads what this app produces.

Notes

  • Passphrases are held in memory as character arrays and cleared after use. This narrows the
    window in which a passphrase is resident; it is not protection against a compromised machine.
  • Nothing is code-signed, so Windows shows a SmartScreen warning and macOS shows a Gatekeeper
    one. The README explains the exact steps.
  • This project has not been independently audited.
Assets 29
Loading