v12.10.5

Release v12.10.5

Baseline: Telegram Android 12.10.5
Commit: 965ecc751
Tag: v12.10.5+965ecc7

---

Artifacts & Downloads

Architecture	Package	Checksum
arm64-v8a	telegram-fork-secure-12.10.5-arm64-v8a.apk	SHA-256
universal	telegram-fork-secure-12.10.5-universal.apk	SHA-256
armeabi-v7a	telegram-fork-secure-12.10.5-armeabi-v7a.apk	SHA-256
x86_64	telegram-fork-secure-12.10.5-x86_64.apk	SHA-256
x86	telegram-fork-secure-12.10.5-x86.apk	SHA-256

All binaries are signed with the project release key. Verification: apksigner verify --verbose <apk>.

---

Highlights & Changes Since v12.9.2

Upstream Alignment

• Merged official Telegram Android 12.10.5 codebase (060c661c0), updating core UI, networking, TDLib bindings, and submodules.
• Adapted Fork-Secure sending pipelines, settings listeners, and chat controllers to Telegram 12.10.5 API changes.

Secure Messaging & Protocol

• Encrypted Contacts & Geo-Location: Added secure payload codecs for TYPE_CONTACT (name, phone, vCard) and TYPE_GEO_LOCATION (coordinates, accuracy, live period) with protected map rendering.
• Authenticated Remote Deletion: Implemented Signal authenticated delete control packets (TYPE_CONTROL_DELETE) with carrier digest verification and local cache/media purge.
• Secure Media Forwarding: Forwarding protected media decrypts locally and re-encrypts under the recipient's ratchet session, preserving waveforms, duration, metadata, and captions.
• Decrypted Media Playback: Direct native playback routing for voice messages, round video notes, and audio files from the decrypted cache.

Security & Defenses

• Anti-Spoofing Link Guard: Integrated SecureLinkGuard detecting IDN homoglyphs, Punycode (xn--), BiDi directional overrides, zero-width spaces, and authority spoofing before external navigation.
• Screen Protection: Enforced FLAG_SECURE window protection across chat, profile, and media viewer activities; disabled gallery export, screenshots, and sharing of decrypted media.
• Leak Prevention: Suppressed cloud drafts and link preview metadata in protected chats; rejected unencrypted cloud reactions fail-closed.
• Test Coverage: 89/89 connected Android instrumentation tests verified on hardware.

---

This is a pre-release build. The independent security review status remains CHANGES REQUIRED (see docs/protocol-review/REVIEW-DECISION.md).

v12.9.2

Release v12.9.2

Baseline: Telegram Android 12.9.2
Commit: f173f59798a5
Tag: v12.9.2+f173f59

---

Artifacts & Downloads

Architecture	Package	Checksum
universal	telegram-fork-secure-12.9.2-universal.apk	SHA-256
arm64-v8a	telegram-fork-secure-12.9.2-arm64-v8a.apk	SHA-256
armeabi-v7a	telegram-fork-secure-12.9.2-armeabi-v7a.apk	SHA-256

All binaries are signed with the project release key. Verification: apksigner verify --verbose <apk>.

---

Highlights

• Fork-Secure protected text and media functionality baseline for 1:1 cloud chats and Saved Messages.
• CI pipeline verifying debug compilation without release credentials and packaging signed multi-architecture APKs from protected GitHub Secrets.
• Multi-architecture release artifacts for Android devices.

---

This is a pre-release build. The independent security review status remains CHANGES REQUIRED (see docs/protocol-review/REVIEW-DECISION.md).