VC Port 0.2.1
·
59 commits
to master
since this release
High-threat hardening release. This derived work is not named VeraCrypt. Nothing here is unbreakable.
What’s in 0.2.1
- Always-on screenshot block, recents hidden, no cloud or device-to-device backup
- Panic wipe and background session lock (passwords and plaintext cache)
- Removed exported DocumentsProvider; FileProvider no longer exposes all of cache
- System TLS CAs only (no user-installed CAs); F-Droid flavor still has no INTERNET
- StrongBox when the hardware has it; compelled-biometrics warning
- Wrap files: Argon2id 32 MiB, mode 0600, keys locked out of swap
- Threat model:
ports/THREAT-MODEL.md
Packages
GitHub Actions attaches debug-signed preview APKs to this release when the VC Port workflow finishes. Those are for testing. F-Droid (or your own keystore) must sign production builds.
./gradlew :app:assembleFdroidRelease
./gradlew :app:assembleGithubRelease
License
Portions of this product are based in part on TrueCrypt, freely available at http://www.truecrypt.org/
The git repo is still private. TrueCrypt 3.0 requires public source before you distribute binaries widely.