Skip to content

PGPony 3.0.1

Choose a tag to compare

@norsehorse-dev norsehorse-dev released this 20 Jun 03:12

Maintenance release. Fixes a duplicate launcher-icon resource that prevented a clean build from source.

PGPony is an OpenPGP app that runs entirely on device: encrypt, decrypt, sign, verify, manage your keyring, and use a hardware security key over NFC. The full app source is public under Apache-2.0, and the FOSS build ships with no Google services.

Changes in 3.0.1

  • Removed duplicate PNG launcher icons that collided with the WebP versions and broke a from-source build

Features

  • On-card key generation for hardware security keys (Ed25519 and X25519) over NFC
  • Full smartcard support on YubiKey 5 NFC and Token2: decrypt, sign, encrypt-and-sign, user and admin PIN management, factory reset, for both RSA and 25519 keys
  • RFC 9580 (OpenPGP v6) key generation with Argon2id passphrase protection
  • Read-only Password Store (pass) support, including entries protected by a hardware key
  • Open-source cryptographic core, published separately as PGPonyCore-Kotlin
  • Biometric lock and secure-screen protection
  • Key discovery through WKD and the keys.openpgp.org verifying keyserver

Install

The FOSS APK is attached to this release, signed with the project release key. F-Droid and IzzyOnDroid listings are on the way.

Verify

  • APK SHA-256: 095c0d8c2fd3e4920a5da26b4c7c1c73c473cd2ce80f73184daea37b7bfc7012
  • Signing certificate SHA-256: 446bf9e621222a40c66cd2476e1a97105ccb2a9b16a01a91c1c7eb90765b50dc

Privacy

No accounts, no ads, no analytics, no tracking. The FOSS build contains no Google services and runs fully on de-Googled devices.

Source: https://github.com/norsehorse-dev/PGPonyAndroid
Crypto core: https://github.com/norsehorse-dev/PGPonyCore-Kotlin